Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Lucysecurity Subscribe
Filtered by product Security Awareness
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28132 1 Lucysecurity 1 Security Awareness 2021-03-22 7.5 HIGH 9.8 CRITICAL
LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support section) allows upload of .php files within a system.tar.gz file. The .php file becomes accessible with a public/system/static URI.