CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in HB WEBSOL HB AUDIO GALLERY hb-audio-gallery allows Upload a Web Shell to a Web Server.This issue affects HB AUDIO GALLERY: from n/a through <= 3.0.
Explanation of Vulnerability in Simple Terms
HB Audio Gallery versions 3.0 and earlier contain an unrestricted file upload vulnerability. An attacker can upload arbitrary files to the server without authentication, potentially gaining the ability to run their own code on the site. This affects confidentiality, integrity, and availability of the entire system.
What an attacker can do
Upload arbitrary files and run their own code on the site without logging in.
Potential impact on your site
Complete compromise of the site: attackers can read data, modify content, disable the site, or use it to attack visitors.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
