Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx can be used, or Ajax.asmx/ProcessUpload2. This leads to remote code execution.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-12-25T00:00:00
Updated: 2022-12-25T00:00:00
Reserved: 2022-11-25T00:00:00
Link: CVE-2022-45896
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-12-25T05:15:11.427
Modified: 2023-01-04T18:56:31.523
Link: CVE-2022-45896
JSON object: View
Redhat Information
No data.
CWE