CVE-2016-5050
CriticalSummary
ReadyDesk 9.1 has an unrestricted file upload vulnerability in chat/sendfile.aspx that allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to restrict file upload capabilities and implement file type validation mechanisms to prevent the upload of dangerous files.
Other vulnerabilities in ReadyDesk 9.1
See all- CVE-2016-5683High
ReadyDesk 9.1 allows local users to obtain cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file.
- CVE-2016-5049High
Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the SESID parameter in conjunction with a filename in the FNAME parameter.
- CVE-2016-5048Critical
ReadyDesk 9.1 has an SQL injection vulnerability in chat/staff/default.aspx that allows remote attackers to execute arbitrary SQL commands via the user name field.
Original NVD description (English source)
Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.