CVE-2024-50658

Critical CVSS: 9.8

Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file

Vendor

Ipublishmedia

Product

Adportal

CWE

CWE-94

Yayın Tarihi

2025-01-07 18:15:18

Güncelleme

2025-06-24 00:17:53

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-94 Adportal CRITICAL Ipublishmedia 2025

Referanslar

http://adportal.com http://ipublish.com https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf