cbcvebase.

Webiness Inventory Project Webiness Inventory vulnerabilities

1 known vulnerability affecting webiness_inventory_project/webiness_inventory.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2019-8404P3MEDIUMCVSS 6.5PoCv2.32019-05-14
CVE-2019-8404 [MEDIUM] CWE-434 CVE-2019-8404: An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File An issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary File Upload via a crafted product image during the creation of a new product. Consequently, an attacker can steal information from the site with the help of an installed executable file, or change the contents of pages.
nvd
Webiness Inventory Project Webiness Inventory vulnerabilities | cvebase