vendor:
Ticket Support System
by:
Cyb3r-1sT
9,3
CVSS
HIGH
Remote File Upload
434
CWE
Product Name: Ticket Support System
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
Ticket Support System Exploit
A vulnerability exists in Ticket Support System, which allows an attacker to upload a malicious file to the server. The attacker can send a ticket with the malicious file attached, and the file will be uploaded to the server in the 'uploads' directory. The attacker can then access the malicious file from the 'uploads' directory.
Mitigation:
Ensure that the application is configured to only allow the upload of files with specific extensions, and that the application is configured to reject files with malicious content.
