PT-2015-5246
CVE-2015-1371
·
تاريخ النشر
2015-01-27
·
تاريخ التحديث
2015-01-28
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ferretCMS version 1.0.4-alpha
Description
The issue allows remote administrators to execute arbitrary code by uploading a file with an executable extension to the custom/uploads/ directory, and then accessing it via a direct request. This is due to an unrestricted file upload vulnerability.
Recommendations
For ferretCMS version 1.0.4-alpha, restrict access to the custom/uploads/ directory to prevent direct execution of uploaded files, and consider implementing file type validation to prevent uploading files with executable extensions.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾