Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 25/03/2020 Updated: 03/02/2023

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

FrozenNode Laravel-Administrator up to and including 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_image/image/file_upload image upload with PHP content within a GIF image that has the .php extension. NOTE: this product is discontinued.

Vulnerable Product	Search on Vulmon	Subscribe to Product
frozennode laravel-administrator

Laravel Administrator version 4 suffers from an unrestricted file upload vulnerability ...

CVE-2020-10963

CWE-434 https://xavibel.com/2020/03/23/unrestricted-file-upload-in-frozennode-laravel-administrator/http://packetstormsecurity.com/files/160243/Laravel-Administrator-4-File-Upload.html https://nvd.nist.gov https://github.com/scopion/CVE-2020-10963 https://packetstormsecurity.com/files/160243/Laravel-Administrator-4-File-Upload.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-10963

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect