Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Beauknowstech

#25908de 53,630
9.8CVSS total
Vulnerabilidades · 1
PT-2023-19069
9.8
2023-01-20
Erohtar · Dasherr · CVE-2023-23607
**Name of the Vulnerable Software and Affected Versions** erohtar/Dasherr versions prior to 1.05.00 **Description** The issue allows any unauthenticated user to execute arbitrary code on the server due to unrestricted file upload. The file /www/include/filesave.php enables uploading files to anywhere on the server. If an attacker uploads a php file, they can execute code on the server. **Recommendations** For versions prior to 1.05.00, upgrade to version 1.05.00 to address the issue. As a temporary workaround, consider restricting access to the /www/include/filesave.php file to prevent unauthorized file uploads. Additionally, avoid uploading php files to the server until the issue is resolved.