LibrettoCMS File Manager Arbitrary File Upload
63Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 9.3epss 1.3%
de la publicación al arma0 días
Publicada en NVD4 ago
metasploit14 jun
probabilidad de explotación
1.3%top 33% de las CVE
explotación observada
noninguna fuente lo reporta
3 exploit(s) público(s)
An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plugins/pgrfilemanager/php/upload.php fails to properly validate file extensions, allowing attackers to upload files with misleading extensions and subsequently rename them to executable .php scripts. This enables remote code execution on the server without authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
LibrettoCMS · LibrettoCMSPoCs públicas encontradas — 3
cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/libretto_upload_exec.rbno verificadocve_referencewww.exploit-db.com/exploits/26213no verificadocve_referencewww.exploit-db.com/exploits/26421no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/libretto_upload_exec.rbhttps://sourceforge.net/projects/librettocms/https://www.exploit-db.com/exploits/26213https://www.exploit-db.com/exploits/26421https://www.vulncheck.com/advisories/librettocms-file-manager-arbitrary-file-upload