PT-2017-7488 · Dotclear · Dotclear

Salvatore Bonaccorso · Publicado 2017-02-09 · Atualizado 2017-03-02 · CVE-2015-8832

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.8.2

Description The issue allows remote authenticated users with specific permissions to execute arbitrary PHP code by uploading files with certain extensions, including .pht, .phps, and .phtml. This is due to multiple incomplete blacklist vulnerabilities in the inc/core/class.dc.core.php file.

Recommendations For versions prior to 2.8.2, update to version 2.8.2 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to only trusted users or disabling the ability to upload files with executable extensions until the update is applied.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-8832

Produtos afetados

Dotclear

Referências · 14

• 🔥 http://packetstormsecurity.com/files/134352/dotclear-2.8.1-Shell-Upload.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Nov/58 · Exploit
• 🔥 https://blog.curesec.com/article/blog/dotclear-281-Code-Execution-93.html · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8832 · Nota
• http://openwall.com/lists/oss-security/2016/03/05/4 · Correção
• https://ubuntu.com/security/CVE-2015-8832 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2016/03/07/5 · Correção
• https://cve.org/CVERecord?id=CVE-2015-8832 · Nota de Segurança
• https://hg.dotclear.org/dotclear/rev/198580bc3d80 · Aviso do Fabricante
• https://dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2 · Nota
• http://securityfocus.com/bid/96379 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8832 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8832 · Nota de Segurança
• http://dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2 · Aviso do Fabricante