Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-94m2-fm5h-cq8v

Опубликовано: 11 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command execution form to gain system access through the uploaded file.

Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command execution form to gain system access through the uploaded file.

EPSS

Процентиль: 46%
0.00234
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 2 месяцев назад

Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command execution form to gain system access through the uploaded file.

CVSS3: 8.8
nvd
около 2 месяцев назад

Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command execution form to gain system access through the uploaded file.

CVSS3: 8.8
debian
около 2 месяцев назад

Dotclear 2.29 contains a remote code execution vulnerability that allo ...

EPSS

Процентиль: 46%
0.00234
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-434