6.5

CVE-2011-1584

Exploit
The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2.2.3 does not properly restrict pathnames, which allows remote authenticated users to upload and execute arbitrary PHP code via the media_path or media_file parameter.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dotclear ≫ Dotclear Version <= 2.2.2
Dotclear ≫ Dotclear Version 1.2.1
Dotclear ≫ Dotclear Version 1.2.2
Dotclear ≫ Dotclear Version 1.2.3
Dotclear ≫ Dotclear Version 1.2.4
Dotclear ≫ Dotclear Version 1.2.5
Dotclear ≫ Dotclear Version 1.2.6
Dotclear ≫ Dotclear Version 1.2.7
Dotclear ≫ Dotclear Version 1.2.8
Dotclear ≫ Dotclear Version 2.0
Dotclear ≫ Dotclear Version 2.0 Update beta_2
Dotclear ≫ Dotclear Version 2.0 Update beta_3
Dotclear ≫ Dotclear Version 2.0 Update beta_4
Dotclear ≫ Dotclear Version 2.0 Update beta_5.2
Dotclear ≫ Dotclear Version 2.0 Update beta_5.4
Dotclear ≫ Dotclear Version 2.0 Update beta_6
Dotclear ≫ Dotclear Version 2.0 Update beta_7
Dotclear ≫ Dotclear Version 2.0 Update rc1
Dotclear ≫ Dotclear Version 2.0 Update rc2
Dotclear ≫ Dotclear Version 2.0.1
Dotclear ≫ Dotclear Version 2.0.2
Dotclear ≫ Dotclear Version 2.1
Dotclear ≫ Dotclear Version 2.1.1
Dotclear ≫ Dotclear Version 2.1.3
Dotclear ≫ Dotclear Version 2.1.4
Dotclear ≫ Dotclear Version 2.1.5
Dotclear ≫ Dotclear Version 2.1.6
Dotclear ≫ Dotclear Version 2.1.7
Dotclear ≫ Dotclear Version 2.2
Dotclear ≫ Dotclear Version 2.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.69% 0.741
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://dev.dotclear.org/2.0/changeset/2:3427
Patch
Exploit
http://dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3
Patch
Vendor Advisory
http://fr.dotclear.org/blog/post/2011/04/01/Dotclear-2.2.3
Vendor Advisory
http://openwall.com/lists/oss-security/2011/04/13/19
http://openwall.com/lists/oss-security/2011/04/14/8
http://openwall.com/lists/oss-security/2011/04/15/11
http://openwall.com/lists/oss-security/2011/04/15/7
http://secunia.com/advisories/44049
Vendor Advisory
http://www.arcabit.com/english/home/a-flaw-in-dotclear