Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-2712 EUVD-2023-34176GHSA-pwgq-6599-qfpv

Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Published May 20, 2023 · Updated May 22, 2026 · Assigned by TR-CERT

Description

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.

This issue affects Rental Module: before 23.05.15.

Affected products

VendorProductAffectedFixed
— Rental Module < 23.05.15 23.05.15

References