File Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the messageid parameter of the mail/mailupdate.jsp endpoint.
References
Configurations
No configuration.
History
22 Aug 2024, 18:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-434 | |
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
22 Mar 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-22 02:15
Updated : 2024-08-22 18:35
NVD link : CVE-2024-28441
Mitre link : CVE-2024-28441
CVE.ORG link : CVE-2024-28441
JSON object : View
Products Affected
No product.
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type