| शीर्षक | kevquirk PureBlog 3.7.2 Unrestricted File Upload |
|---|
| विवरण | PureBlog through 3.7.2 allows authenticated administrators to upload files with dangerous extensions via the admin image upload endpoint.
The endpoint verifies the uploaded file MIME type with finfo but does not enforce a safe file extension, and image/gif and image/avif files are not re-encoded when the Imagick extension is absent. An administrator can therefore upload a GIF polyglot named shell.php, which is stored under the web root and executed as PHP on deployments where the content/images/.htaccess restriction is not enforced, leading to remote code execution.
Reproduction: https://github.com/sumo166/CVE-apply/blob/main/kevquirk/pureblog/Image%20Upload%20Filename%20MIME%20Bypass%20RCE%20(CWE-434)_cve.md |
|---|
| स्रोत | ⚠️ https://github.com/kevquirk/pureblog/issues/86 |
|---|
| उपयोगकर्ता | summmm (UID 69690) |
|---|
| सबमिशन | 17/10/2026 03:30 PM (23 दिन पहले) |
|---|
| संयम | 09/11/2026 09:09 AM (23 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 433065 [kevquirk PureBlog तक 3.7.2 Admin Image Upload Endpoint admin/upload-image.php अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|