CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in paxmanpwnz Product Website Showcase product-websites-showcase allows Upload a Web Shell to a Web Server.This issue affects Product Website Showcase: from n/a through <= 1.0.
Explanation of Vulnerability in Simple Terms
Product Website Showcase versions 1.0 and earlier contain an unrestricted file upload vulnerability. An attacker can upload arbitrary files to the site without authentication, potentially allowing them to run malicious code, modify site content, or take the site offline. No user interaction is required.
What an attacker can do
Upload arbitrary files and run malicious code on the site without authentication.
Potential impact on your site
Attackers can compromise your site, steal data, modify content, or disable it entirely.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
