Unrated

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase)...

CVE-2017-18048 First seen on SecPulse Jan 23, 2018

Original description The description as published by the source.

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
report blogs.securiteam.com
report securityprince.blogspot.in
report exploit-db.com

Key facts

Severity: Unrated
Published: Jan 23, 2018
First seen on SecPulse: Jan 23, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49