Описание
MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:monocms:monocms:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05872
Низкий
7.2 High
CVSS3
9 Critical
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
github
больше 3 лет назад
MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.
EPSS
Процентиль: 90%
0.05872
Низкий
7.2 High
CVSS3
9 Critical
CVSS2
Дефекты
NVD-CWE-noinfo