| Package | Affected versions | Patched versions |
|---|---|---|
| planet estream | < 6.72.10.07 | 6.72.10.07 |
Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx can be used, or Ajax.asmx/ProcessUpload2. This leads to remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free