CVE-2018-16731 - CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data

Back Back to CVE browser

CRITICAL

CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data

Published Sep 8, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 1.49%

Description

CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-8532
Advisory
https://github.com/AvaterXXX/CScms/blob/master/CScms_up.md
x_refsource_MISCThird Party Advisory
https://www.patec.cn/newsshow.php?cid=24&id=123
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-8532		Advisory
https://github.com/AvaterXXX/CScms/blob/master/CScms_up.md		x_refsource_MISCThird Party Advisory
https://www.patec.cn/newsshow.php?cid=24&id=123		x_refsource_MISCExploitThird Party Advisory