Non évaluée

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase)...

CVE-2017-18048 Première détection SecPulse Jan 23, 2018

Description d'origine La description telle que publiée par la source (souvent en anglais).

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch github.com
report blogs.securiteam.com
report securityprince.blogspot.in
report exploit-db.com

Faits clés

Gravité: Non évaluée
Publication: Jan 23, 2018
Première détection SecPulse: Jan 23, 2018

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49