CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

Yangiliklar CVE Tracker Exploitlar Hujumlar Xarita

CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

O'zbek tilidagi kiberxavfsizlik portali. Yangiliklar, CVE tracker, hujumlar bazasi.

Yangiliklar

Barcha yangiliklar
Hujumlar
Zayifliklar
O'zbekiston
Jahon

Asboblar

CVE Tracker
Exploit DB
Hujumlar bazasi
Threat xarita

Loyiha

Biz haqimizda

© 2026 CyberNewsUz. Barcha huquqlar himoyalangan.

CVE Tracker ga qaytish

CVE-2017-11317

Kritik(9.8)

Telerik.Web.UI Progressda ASP.NET AJAX uchun Telerik UI R1 2017 va R2 oldin R2 2017 SP2 zaif RadAsyncUpload shifrlashdan foydalanadi, bu masofaviy hujumchilarga o'zboshimchalik bilan fayllarni yuklash yoki o'zboshimchalik kodini bajarish imkonini beradi.

Vendor

Telerik

Product

Ui For Asp.Net Ajax

CVSS Score

9.8

Nashr sanasi

23-avg, 2017

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Manbalar

http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html
http://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/unrestricted-file-upload
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006
https://www.exploit-db.com/exploits/43874/
http://packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-RadAsyncUpload-Deserialization.html

Yangi kritik zaifliklar

CyberNewsUz — CVE-2017-11317