CVE Catalog
CVE-2017-15962
CriticalSummary
iStock Management System 1.0 allows Arbitrary File Upload via user/profile.
Risk Assessment
The ability to upload arbitrary files may lead to malware deployment or data leakage, posing a significant security risk to the organization.
Recommendation
It is recommended to implement restrictions on the types of files that can be uploaded and to deploy scanning of uploaded files for malware detection.
Original NVD description (English source)
iStock Management System 1.0 allows Arbitrary File Upload via user/profile.