Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47588
HistoryJun 18, 2024 - 6:12 a.m.

Code Injection

2024-06-1806:12:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
vulnerability
code injection
improper validation
server exploitation
software

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

nukeviet/nukeviet is vulnerable to Code Injection. The vulnerability is due to improper validation in the /admin/extensions/upload.php component. An attacker can exploit this vulnerability to execute arbitrary code on the server.

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for VERACODE:47588