Description
Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified vectors.
References (3)
Core 3
Core References
Mitigation, Vendor Advisory x_refsource_confirm
http://dev.dotclear.org/2.0/ticket/2214
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94246
Issue Tracking, Patch x_refsource_confirm
http://dev.dotclear.org/2.0/changeset/445e9ff79a1fa81033591761d6a340e219d159b2
Scores
CVSS v3
7.2
EPSS
0.0088
EPSS Percentile
75.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-434
Status
published
Products (1)
dotclear/dotclear
< 2.10.4
Published
Nov 10, 2016
Tracked Since
Feb 18, 2026