CVE-2018-19798

Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the…

published March 2, 2020

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidents_add.php?submit=1 URI, as demonstrated by the value_Images_1 field, which leads to remote command execution on the remote server. Any authenticated user can exploit this.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03100 · 87.7th percentile
Published
2020-03-02T20:37Z
EPSS history
Timeline
  • 02 MAR 20:37Z
    Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the…
    cvelistv5