CVE-2024-44871

HIGH

MoziloCMS 3.0 - Remote Code Execution (RCE)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-44871 has a selected CVSS score of 7.2 (high); EIP currently links 1 catalogued exploit and 1 repository PoC.

Description

An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 10, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

mozilocms

Browse mozilo / mozilocms

Default status: unknown

CVE List3.0affected

Proofs of concept

2

Catalogued exploits

ExploitDBMoziloCMS 3.0 - Remote Code Execution (RCE)ExploitDB exploitby Olakojo Olaoluwa JoshuaNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubvances25/CVE-2024-44871Repository PoCby vances250Not analyzed3 files

4.5 KiB

GitHub
PoC details

References

3