CVE-2016-5661 Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and f...
HighCVSS 8.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| accela civic platform citizen access portal | All versions | No fix listed |
References
- VU#665280 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- 91765 vdb-entry