exploitDog

CVE-2011-2745

Опубликовано: 27 июл. 2011

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, via a write_post action to the default URI under admin/.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:chyrp:chyrp:*:*:*:*:*:*:*:*

Версия до 2.0 (включая)

EPSS

Процентиль: 85%

0.02443

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-rq7c-vpq5-hm7w

github

больше 3 лет назад

upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, via a write_post action to the default URI under admin/.

EPSS

Процентиль: 85%

0.02443

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264