Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:MISC:CLAYDIP-AIRBNB-CLONE |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Claydip Airbnb Clone CVE-2017-14704 File Upload/Download |
Release Date |
2019/03/28 |
Update Number |
3157 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Claydip Airbnb Clone CVE-2017-14704 File Upload/Download
This signature detects attempts to exploit a known vulnerability against Claydip Airbnb Clone. A successful attack can lead to File Upload/Download.
Extended Description
Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/profile.
Affected Products
- Claydip airbnb_clone 1.0
References
- CVE: CVE-2017-14704