CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through <= 3.8115.
Explanation of Vulnerability in Simple Terms
RepairBuddy versions 3.8115 and earlier contain an unrestricted file upload vulnerability. An attacker can upload arbitrary files to the server without authentication, potentially gaining the ability to run their own code on the site. The vulnerability affects the entire system and can lead to complete compromise of confidentiality, integrity, and availability.
What an attacker can do
Upload arbitrary files to the server and execute code without authentication.
Potential impact on your site
Complete site compromise: attackers can read all data, modify content, disable the site, or use it to attack others.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
