Описание
Arbitrary file upload in Fork CMS
Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.
Пакеты
Наименование
forkcms/forkcms
composer
Затронутые версииВерсия исправления
<= 5.9.2
5.9.3
Связанные уязвимости
CVSS3: 8.8
nvd
больше 4 лет назад
Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.