| शीर्षक | CMS Made Simple 2.2.21 Arbitrary File Upload |
|---|
| विवरण | CMS Made Simple Version 2.2.21 upload-photo.php file contains a critical arbitrary file upload vulnerability. There is a lack of proper validation for the extracted files from compressed archives. Attackers can bypass restrictions to upload compressed files containing malicious PHP scripts and extract them after upload. The uploaded files are stored in a publicly accessible directory, and these scripts can then be accessed and executed via a web browser, enabling the attacker to fully compromise the server environment. |
|---|
| स्रोत | ⚠️ https://github.com/feixuezhi/CMSMadeSimple/wiki/fileupload |
|---|
| उपयोगकर्ता | feioklucy (UID 83820) |
|---|
| सबमिशन | 04/07/2025 11:46 AM (1 वर्ष पहले) |
|---|
| संयम | 10/07/2025 08:39 AM (6 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 256511 [CMS Made Simple 2.2.14 upload अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|