high8.8Public exploit code
CVE-2018-12519
An issue was discovered in ShopNx through 2017-11-17.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ShopNx - Arbitrary File Upload2018-07-04 · webapps · php
Impact
An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codenx | Shopnx | All versions |