CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through <= 1.27.80.
Explanation of Vulnerability in Simple Terms
Marketing Automation by AZEXO versions 1.27.80 and earlier allow authenticated users to upload files without proper validation. An attacker with low-level access can upload malicious files to the server, potentially gaining control over the site. The vulnerability affects confidentiality, integrity, and availability of the entire system.
What an attacker can do
Upload malicious files to the server and execute code with full site access.
Potential impact on your site
A compromised user account can lead to complete site takeover, data theft, and malware installation.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
