vendor:
Dezign-Box © France
by:
indoushka
7,5
CVSS
HIGH
XSS and Upload Shell
79,434
CWE
Product Name: Dezign-Box © France
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)
2020
Galerie Dezign-Box © France Multi Vulnerability
The vulnerability allows an attacker to inject malicious code into the vulnerable application. The attacker can inject malicious code into the vulnerable application by sending a malicious URL to the victim. The malicious URL contains a malicious script which is executed when the victim visits the URL. The attacker can also upload a malicious shell to the vulnerable application by sending a malicious file to the vulnerable application. The malicious file is then executed when the victim visits the vulnerable application.
Mitigation:
Input validation should be used to prevent malicious code from being injected into the application. The application should also be configured to only allow certain file types to be uploaded to the application.
