Lucene search

VulDBCVELIST:CVE-2023-7026

HistoryDec 21, 2023 - 4:31 a.m.

CVE-2023-7026 Lightxun IPTV Gateway web_upload_template.html unrestricted upload

2023-12-2104:31:04

CWE-434

VulDB

www.cve.org

vulnerability

lightxun iptv gateway

unrestricted upload

cve-2023-7026

file manipulation

remote attack

public exploit

vdb-248579

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

27.5%

JSON

A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects some unknown processing of the file /ZHGXTV/index.php/admin/index/web_upload_template.html. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248579.

CNA Affected

[
  {
    "vendor": "Lightxun",
    "product": "IPTV Gateway",
    "versions": [
      {
        "version": "20231208",
        "status": "affected"
      }
    ]
  }
]

References

github.com/willchen0011/cve/blob/main/upload2.md

vuldb.com/?ctiid.248579

vuldb.com/?id.248579

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

27.5%

JSON

Related for CVELIST:CVE-2023-7026