PT-2017-12224 · Earcms · Earcms Ear Music

Publicado 2017-07-30 · Atualizado 2017-08-04 · CVE-2017-11756

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Earcms Ear Music versions prior to 4.1 build 20170710

Description The issue allows remote authenticated users to execute arbitrary PHP code. This can be achieved by modifying the allowable music-upload extensions in admin.php?iframe=config upload to include .php, in addition to .mp3 and .m4a, and then uploading the code using user.php/music/add/.

Recommendations For Earcms Ear Music versions prior to 4.1 build 20170710, as a temporary workaround, consider restricting access to the admin.php?iframe=config upload endpoint and the user.php/music/add/ endpoint to prevent arbitrary PHP code execution until a patch is available. Avoid using the music upload feature with .php extensions in the affected versions.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2017-11756

Produtos afetados

Earcms Ear Music

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-11756 · Nota de Segurança
• https://lncken.cn/?p=359 · Nota
• https://osv.dev/vulnerability/CVE-2017-11756 · Aviso do Fabricante