vendor:
SkaDate Dating
by:
ZoRLu
7.5
CVSS
HIGH
Remote Shell Upload
434
CWE
Product Name: SkaDate Dating
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
SkaDate Dating Remote Shell Upload
A vulnerability in SkaDate Dating allows an attacker to upload a malicious shell to the server. The attacker can then use the shell to execute arbitrary commands on the server. The vulnerability exists due to insufficient validation of the uploaded file type. An attacker can exploit this vulnerability by uploading a malicious PHP file with a double extension such as “shell.php.jpg”. The malicious file will be uploaded to the server and can be accessed via a web browser.
Mitigation:
The vendor has released a patch to address this vulnerability. It is recommended to apply the patch as soon as possible.
