Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2016-5661

HIGH · 8.8 CVSS Gepubliceerd: CWE-284

Beschrijving

Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.

Vendors

Accela

Affected products

Civic Platform Citizen Access Portal

References