CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters allows Upload a Web Shell to a Web Server.This issue affects RSVPMaker for Toastmasters: from n/a through <= 6.2.4.
Explanation of Vulnerability in Simple Terms
RSVPMaker for Toastmasters versions 6.2.4 and earlier allow unauthenticated attackers to upload arbitrary files to the server without restriction. An attacker can upload malicious files—such as PHP scripts—to gain complete control of the site, read sensitive data, modify content, or take the site offline. No user interaction or authentication is required.
What an attacker can do
Upload arbitrary files and run malicious code on the server to take full control of the site.
Potential impact on your site
Complete site compromise: attackers can steal data, modify content, install backdoors, or destroy the site.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
