cbcvebase.

Kbvault Mysql Project Kbvault Mysql vulnerabilities

1 known vulnerability affecting kbvault_mysql_project/kbvault_mysql.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2017-9602P2CRITICALCVSS 9.8PoCv0.16a2017-06-16
CVE-2017-9602 [CRITICAL] CWE-732 CVE-2017-9602: KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx? KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to Uploads/Documents/ to run any arbitrary code.
nvd
Kbvault Mysql Project Kbvault Mysql vulnerabilities | cvebase