CVE-2018-0568

Unrestricted file upload vulnerability in SiteBridge Inc. Joruri Gw Ver 3.2.0 and earlier allows remote authenticated users to execute arbitrary PHP code via unspecified vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2018-05-14

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Joruri Gw (Sitebridge)
• Joruri Gw (Sitebridge Inc.)

References

• http://jvn.jp/en/jp/JVN95589314/index.html
• https://github.com/joruri/joruri-gw/blob/master/doc/INSTALL.txt