CVE-2021-44673
Dashboard / Vulnerabilities / CVE-2021-44673
Summary:
Details: A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script.
References: https://github.com/3erk1n/Vulnerabilities
Affected packages
Package
Name:
Purl:
Affected ranges
Type: GIT
Events:
Introduced- 7b64bf6643be8b334551444cdb4293953fe2d3d3
Fixed -None
Affected versions
3.0.2
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
