CVE-2016-5050

Critical

Published: 26/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

ReadyDesk 9.1 has an unrestricted file upload vulnerability in chat/sendfile.aspx that allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.

Risk Assessment

This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to restrict file upload capabilities and implement file type validation mechanisms to prevent the upload of dangerous files.

Original NVD description (English source)

Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.