Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

CVE-2020-5505

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"application/x-php"} to the /api/files/ URI.

CVSS 3.1 · 9.8 Critical EPSS 44.3% KEV · Not listed
Vendors
Vaaip
Products
Freelancy