CVE-2019-11028

GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to the server via the "Documents" area

published April 9, 2019

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to the server via the "Documents" area. This vulnerability is related to "uploadDocFile.aspx".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02742 · 86.1th percentile
Published
2019-04-09T13:09Z
EPSS history
Timeline
  • 09 APR 13:09Z
    GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to the server via the "Documents" area
    cvelistv5