CVE-2020-5505

n/a / n/a PUBLISHED

Description (CNA)

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"application/x-php"} to the /api/files/ URI.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

http://packetstormsecurity.com/files/155922/Freelancy-1.0.0-Remote-Code-Execution.html

ADP enrichment

CVE

No English description supplied.

http://packetstormsecurity.com/files/155922/Freelancy-1.0.0-Remote-Code-Execution.html