CVE-2019-11401 | BDVDB-2026-115402 Detail

Description#

A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/siteserver/cms/issues/1858

Exploit#

No public exploit known

History#

Version 12019-04-21Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.