CVE-2016-6255

Publication date

2017-03-07 16:00:00

Family

mitre

State

PUBLISHED

Description

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.