LibrettoCMS File Manager Arbitrary File Upload
63Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 9.3epss 1.3%
da publicação à arma0 dias
Publicada no NVD4 de ago.
metasploit14 de jun.
probabilidade de exploração
1.3%top 33% das CVEs
exploração observada
nãonenhuma fonte reporta
3 exploit(s) público(s)
An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plugins/pgrfilemanager/php/upload.php fails to properly validate file extensions, allowing attackers to upload files with misleading extensions and subsequently rename them to executable .php scripts. This enables remote code execution on the server without authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
LibrettoCMS · LibrettoCMSPoCs públicas encontradas — 3
cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/libretto_upload_exec.rbnão verificadocve_referencewww.exploit-db.com/exploits/26213não verificadocve_referencewww.exploit-db.com/exploits/26421não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/libretto_upload_exec.rbhttps://sourceforge.net/projects/librettocms/https://www.exploit-db.com/exploits/26213https://www.exploit-db.com/exploits/26421https://www.vulncheck.com/advisories/librettocms-file-manager-arbitrary-file-upload