CVE-2018-0568

HIGH

SiteBridge Joruri Gw < 3.2.0 - Authenticated Arbitrary PHP Code Execution via File Upload

Title source: llm
STIX 2.1

Description

Unrestricted file upload vulnerability in SiteBridge Inc. Joruri Gw Ver 3.2.0 and earlier allows remote authenticated users to execute arbitrary PHP code via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN95589314/index.html

Scores

CVSS v3 8.8
EPSS 0.0172
EPSS Percentile 74.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-434
Status published
Products (1)
sitebridge/joruri_gw < 3.2.0
Published May 14, 2018
Tracked Since Feb 18, 2026