CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed ajar-productions-in5-embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through <= 3.1.3.
Explanation of Vulnerability in Simple Terms
Ajar in5 Embed versions 3.1.3 and earlier allow unauthenticated attackers to upload arbitrary files to the server without restriction. An attacker can exploit this over the network to upload malicious files, potentially gaining control of the affected system. No user interaction is required. This vulnerability affects the integrity, confidentiality, and availability of the entire system.
What an attacker can do
Upload arbitrary files to the server and execute code without authentication.
Potential impact on your site
Complete compromise of the server; attacker can read, modify, or delete all data and run arbitrary code.
Conditions required to exploit
Network access to the vulnerable application. No authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
