Description (CNA)
4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| 4MOSAn / GCB Doctor | affected unspecified through 20210811(2.0) |
CWE
CWE-434
References
ADP enrichment
No English description supplied.