CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Upload a Web Shell to a Web Server.This issue affects Stars SMTP Mailer: from n/a through <= 2.2.1.
Explanation of Vulnerability in Simple Terms
Stars SMTP Mailer versions 2.2.1 and earlier allow authenticated users to upload files without proper validation. An attacker with low-level access can upload malicious files to the server, potentially gaining control over the site. The vulnerability affects confidentiality, integrity, and availability of the affected system.
What an attacker can do
Upload malicious files to the server and execute code with site-level privileges.
Potential impact on your site
A compromised user account can lead to full site takeover, data theft, or malware installation.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
