PT-2023-28318 · Elitecms · Elitecms
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
EliteCMS version 1.01
Description
A file upload vulnerability allows a remote attacker to execute arbitrary code via the manage uploads.php component.
Recommendations
For EliteCMS version 1.01, consider disabling the file upload functionality in the manage uploads.php component until a patch is available. Restrict access to the manage uploads.php component to minimize the risk of exploitation.
Exploit
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Elitecms