Описание
Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface. Attackers can upload a malicious .phar file with embedded system command execution capabilities to execute arbitrary commands on the server.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:grabaperch:perch:3.2:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00391
Низкий
7.2 High
CVSS3
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 7.2
github
около 2 месяцев назад
Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface. Attackers can upload a malicious .phar file with embedded system command execution capabilities to execute arbitrary commands on the server.
EPSS
Процентиль: 60%
0.00391
Низкий
7.2 High
CVSS3
Дефекты
CWE-434