CVE-2018-17058

HIGH 8.8CVE-2018-17058 · Published 02/03/2020 · updated 17/06/2026

In short

CVE-2018-17058 is a HIGH (CVSS 8.8) vulnerability affecting jaba xpress (jaba).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jaba xpress jaba	`≤ 2018-09-14`	No fix yet

Description

An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs in FileUploader.aspx by using empty w and h parameters. This file may contain arbitrary aspx code that may be executed by accessing /Jec/ProductImages/<number>/<filename>. Accessing the file once uploaded does not require authentication.

References

cyber-crime.ru/cve/CVE-2018-17058.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free