Description
The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site.
Unscored
CVE-2019-15123
EUVD-2019-6192GHSA-3fvv-4h43-9g7x
The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to …
Published Jun 12, 2020 · Updated Aug 5, 2024 · Assigned by mitre