FlashChat Arbitrary File Upload RCE
63Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.3epss 1.3%
from disclosure to weapon0 days
Published on NVDJul 31
metasploitOct 4
exploitation probability
1.3%top 33% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8. The upload.php endpoint fails to properly validate file types and authentication, allowing attackers to upload malicious PHP scripts. Once uploaded, these scripts can be executed remotely, resulting in arbitrary code execution as the web server user.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
TUFaT · FlashChatpublic PoCs found — 2
cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/flashchat_upload_exec.rbunverifiedcve_referencewww.exploit-db.com/exploits/28709unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/flashchat_upload_exec.rbhttps://www.exploit-db.com/exploits/28709https://www.fortiguard.com/encyclopedia/ips/37342/flashchat-arbitrary-file-uploadhttps://www.phpbb.com/community/viewtopic.php?t=2627786https://www.vulncheck.com/advisories/flashchat-arbitrary-file-upload-rce