| शीर्षक | SEMCMS SEMCMS Foreign Trade Website PHP Multilingual Version 4.2 Unrestricted File Upload |
|---|
| विवरण | SEMCMS Foreign Trade Website PHP Multilingual Version 4.2 has an unauthenticated file upload vulnerability in the KindEditor upload interface.
The vulnerable endpoint is /Edit/php/upload_json.php?dir=file. The endpoint does not check login status or user permission before accepting uploaded files. In the file upload type, htm/html files are allowed and stored under the web-accessible directory /Images/attached/file/.
An unauthenticated remote attacker can upload an HTML file through the imgFile field. The uploaded file is then served by the target website as text/html. When the file is opened, JavaScript code runs under the target website origin.
This can allow an attacker to host a fake page or script page under the trusted website domain, affect website content integrity, read non-HttpOnly cookies, and send same-origin requests if a logged-in user or administrator opens the uploaded file.
The issue was reproduced on multiple SEMCMS PHP 4.2 deployments, including:
https://www.musefeel.com/Edit/php/upload_json.php?dir=file
https://www.prosperity-crafts.com/Edit/php/upload_json.php?dir=file
https://www.563888.xyz/Edit/php/upload_json.php?dir=file
The issue is related to unrestricted upload of dangerous file types and results in stored cross-site scripting. |
|---|
| स्रोत | ⚠️ https://github.com/CSDVi/cve/issues/7 |
|---|
| उपयोगकर्ता | david_12 (UID 99465) |
|---|
| सबमिशन | 24/07/2026 11:06 AM (2 महीनों पहले) |
|---|
| संयम | 23/09/2026 05:42 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 409004 [SEMCMS तक 4.2 KindEditor Upload Interface upload_json.php imgFile क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|