CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Saad Iqbal User Management user-management allows Upload a Web Shell to a Web Server.This issue affects User Management: from n/a through <= 1.1.
Explanation of Vulnerability in Simple Terms
User Management versions 1.1 and earlier allow authenticated users to upload files without restriction. An attacker with low-level account access can upload malicious files to the server, potentially executing code or compromising the entire site. The vulnerability affects confidentiality, integrity, and availability of the system.
What an attacker can do
Upload and execute malicious files on the server with low-level user account access.
Potential impact on your site
A low-privilege user account can be exploited to upload malicious code and take over the entire site.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
