vendor:
kandalf upper 0.1
by:
indoushka
9.3
CVSS
HIGH
Upload Shell
434
CWE
Product Name: kandalf upper 0.1
Affected Version From: kandalf upper 0.1
Affected Version To: kandalf upper 0.1
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)
N/A
kandalf upper 0.1 Upload Shell Vulnerability
A vulnerability exists in kandalf upper 0.1 which allows an attacker to upload a malicious shell to the server. The attacker can then use the shell to gain access to the server and execute arbitrary code.
Mitigation:
The vendor should implement proper input validation and authentication checks to prevent unauthorized access to the upload functionality.
