Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pgm3-3759-c76g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.

EPSS

Процентиль: 90%
0.05872
Низкий

Связанные уязвимости

CVSS3: 7.2
nvd
около 5 лет назад

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.

EPSS

Процентиль: 90%
0.05872
Низкий