Description
Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado. This vulnerability allows an attacker to upload a dangerous file type by sending a POST request using the parameter “cctl00$ContentPlaceHolder1$fuAdjunto” in “/MemberPages/ntf_absentismo.aspx”.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Summar Software | Portal del Empleado | 3.98.0 | — |