CVE-2018-19463

Опубликовано: 22 нояб. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows remote attackers to execute arbitrary PHP code by using the image/jpeg content type in an upload to the zb_system/admin/index.php?act=UploadMng URI. NOTE: The vendor's position is "We have no dynamic including. No one can run PHP by uploading an image in current version." It also requires authentication

Ссылки

https://github.com/novysodope/Z-BlogPHP1.5Zero/blob/master/Getshell
Broken Link
Third Party Advisory
https://github.com/zblogcn/zblogphp/issues/205
Third Party Advisory
https://github.com/novysodope/Z-BlogPHP1.5Zero/blob/master/Getshell
Broken Link
Third Party Advisory
https://github.com/zblogcn/zblogphp/issues/205
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zblogcn:z-blogphp:*:*:*:*:*:*:*:*

Версия до 1.5.1 (включая)

EPSS

Процентиль: 78%

0.01174

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-87q4-fqr2-3wr2