CAPEC-650 Upload a Web Shell to a Web Server
Abstraktion: detailedStatus: activeBy exploiting insufficient permissions, it is possible to upload a web shell to a web server in such a way that it can be executed remotely. This shell can have various capabilities, thereby acting as a "gateway" to the underlying web server. The shell might execute at the higher permission level of the web server, providing the ability the execute malicious code at elevated levels.
Schweregrad: High
01
Schwächen (2)
Die CWE-Schwächeklassen, zu denen dies gehört.
02
ATT&CK-Techniken
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
03
verwandte Angriffsmuster (1)
Verwandte Einträge.
04
Quelle
Wo diese Definition veröffentlicht ist.