CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through <= 2.08.
Explanation of Vulnerability in Simple Terms
Green Downloads versions 2.08 and earlier allow authenticated users to upload files without proper validation. An attacker with low-level access can upload malicious files that execute on the server, potentially compromising the entire site. The vulnerability affects confidentiality, integrity, and availability of the system.
What an attacker can do
Upload and execute malicious files on the server to compromise the site.
Potential impact on your site
A compromised site can have data stolen, modified, or deleted; attackers may gain full control.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
