CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Shafiq Digital Lottery digital-lottery allows Upload a Web Shell to a Web Server.This issue affects Digital Lottery: from n/a through <= 3.0.5.
Explanation of Vulnerability in Simple Terms
Digital Lottery versions 3.0.5 and earlier contain an unrestricted file upload vulnerability. An attacker can upload arbitrary files to the server without authentication, potentially executing malicious code or compromising the entire system. The vulnerability requires no user interaction and is remotely exploitable over the network.
What an attacker can do
Upload and execute arbitrary files on the server, gaining full control of the site.
Potential impact on your site
Complete compromise of the site and server; attacker can read, modify, or delete all data.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
