CVE-2016-6255

Published March 7th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.

mjg59/pupnp-code

Portable Universal Plug'n'Play implementation

GitHub