Critical severity9.8NVD Advisory· Published May 20, 2023· Updated Jun 17, 2026
CVE-2023-2712
CVE-2023-2712
Description
Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.
This issue affects Rental Module: before 23.05.15.
Affected products
3- Range: <23.05.15
- Ideasoft/Rental Moduledescription
- cpe:2.3:a:rental_module_project:rental_module:*:*:*:*:*:*:*:*Range: <23.05.15
Patches
Vulnerability mechanics
References
2- www.usom.gov.tr/bildirim/tr-23-0276nvdThird Party Advisory
- siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0276nvd
News mentions
0No linked articles in our index yet.