MEDIUM
Fujian mwcms Image Upload uploadeditor.html uploadeditor unrestricted upload
Published Aug 12, 2024
5.1
MEDIUMCVSS 4.0
EPSS 0.35%
Description
A vulnerability was found in Fujian mwcms 1.0.0. It has been declared as critical. Affected by this vulnerability is the function uploadeditor of the file /uploadeditor.html?action=uploadimage of the component Image Upload. The manipulation of the argument upfile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
-
- Version 1.0.0StatusaffectedConstraints-
- Version
-
- Version 1.0.0StatusaffectedConstraints-
- Version
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://github.com/DeepMountains/Mirage/blob/main/CVE12-1.md exploitBroken Link
- https://vuldb.com/?ctiid.274183 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.274183 vdb-entrytechnical-descriptionPermissions RequiredVDB Entry
- https://vuldb.com/?submit.385617 third-party-advisoryThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://github.com/DeepMountains/Mirage/blob/main/CVE12-1.md | exploitBroken Link | |
| https://vuldb.com/?ctiid.274183 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.274183 | vdb-entrytechnical-descriptionPermissions RequiredVDB Entry | |
| https://vuldb.com/?submit.385617 | third-party-advisoryThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Aug 12, 2024
Updated Aug 13, 2024
Reserved Aug 12, 2024
Link CVE-2024-7705
CISA Vulnrichment
Updated Aug 13, 2024