CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Team Devexhub Devexhub Gallery devexhub-gallery allows Upload a Web Shell to a Web Server.This issue affects Devexhub Gallery: from n/a through <= 2.0.1.
Explanation of Vulnerability in Simple Terms
Devexhub Gallery versions 2.0.1 and earlier allow unauthenticated attackers to upload arbitrary files to the server without restriction. An attacker can upload malicious files—such as PHP scripts—over the network and execute them, gaining full control of the site. No user interaction or special privileges are required.
What an attacker can do
Upload and execute arbitrary files (such as PHP scripts) on the server without authentication.
Potential impact on your site
Complete compromise of the site; attacker can read, modify, or delete all data and run arbitrary code.
Conditions required to exploit
Network access only; no authentication, user interaction, or special privileges required.
Key dates
External resources
Related vulnerabilities
