CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in bikramjoshii B-Banner Slider b-banner-slider allows Upload a Web Shell to a Web Server.This issue affects B-Banner Slider: from n/a through <= 1.1.
Explanation of Vulnerability in Simple Terms
B-Banner Slider versions 1.1 and earlier allow authenticated users to upload files without proper validation. An attacker with low-level site access can upload malicious files, potentially gaining control of the entire site. The vulnerability affects file integrity, confidentiality, and availability across the application.
What an attacker can do
Upload malicious files to the server and execute arbitrary code on the site.
Potential impact on your site
A compromised site account can lead to full site takeover, data theft, and malware installation.
Conditions required to exploit
Attacker needs a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
