PT-2020-10364 · Unknown · Employee Records System

Published 2020-01-09 · Updated 2020-01-24 · CVE-2019-20183

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Employee Records System version 1.0

Description The issue allows an attacker to upload and execute arbitrary PHP code due to inadequate file-extension validation, which is only performed on the client side. This can be achieved by modifying the global.js file to permit the .php extension, allowing the attacker to bypass the client-side validation and upload malicious PHP code.

Recommendations For Employee Records System version 1.0, consider disabling the upload functionality in uploadimage.php until a proper server-side validation mechanism is implemented to prevent the upload of malicious PHP code. Restrict access to the global.js file to prevent modifications that could allow bypassing of the client-side validation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-20183

Affected Products

Employee Records System

References · 4

• 🔥 https://medium.com/@Pablo0xSantiago/cve-2019-20183-employee-records-system-bypass-file-upload-to-rce-ea2653660b34 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-20183 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20183 · Vendor Advisory
• https://medium.com/%40Pablo0xSantiago/cve-2019-20183-employee-records-system-bypass-file-upload-to-rce-ea2653660b34 · Note