未評価
Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote aut...
CVE-2016-9268
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified vectors.
参照URL
- advisory dev.dotclear.org
- advisory securityfocus.com
- patch dev.dotclear.org