CVE-2019-15130

{"id": "CVE-2019-15130", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2019-08-18T17:15:09.713", "references": [{"url": "https://gist.github.com/izadgot/38a7dd553f8024ed3154134dae0414fd", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-330"}]}], "descriptions": [{"lang": "en", "value": "The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile picture folder via a crafted recruitment_online/personalData/act_personaltab.cfm multiple-part POST request with a predictable WRC01_USERID parameter. Moreover, the attacker can upload executable content (e.g., asp or aspx) for executing OS commands on the server."}, {"lang": "es", "value": "El m\u00f3dulo de reclutamiento en Humanica Humatrix 7 versiones 1.0.0.203 y 1.0.0.681, permite a un atacante no autenticado cargar cualquier tipo de archivo hacia una carpeta de im\u00e1genes de perfil de un candidato por medio de una petici\u00f3n POST dise\u00f1ada de m\u00faltiples partes del archivo recrument_online/personalData/act_personaltab.cfm con un par\u00e1metro WRC01_USERID predecible. Adicionalmente, el atacante puede cargar contenido ejecutable (por ejemplo, asp o aspx) para ejecutar comandos de SO en el servidor."}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:humanica:humatrix_7:1.0.0.203:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C87D8AD0-083F-4303-BFDC-D3DA3B28038A"}, {"criteria": "cpe:2.3:a:humanica:humatrix_7:1.0.0.681:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A17342D-4398-41B3-8F15-FE2538093B49"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}