PT-2014-5497 · Dotclear · Dotclear

Egidio Romano · Published 2014-06-11 · Updated 2014-06-12 · CVE-2014-3782

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.6.3

Description The issue is related to incomplete blacklist vulnerabilities in the filemanager::isFileExclude method within the Media Manager. This allows remote authenticated users to execute arbitrary PHP code by uploading files with specific extensions, such as double extensions or certain PHP file extensions like .php5 or .phtml.

Recommendations For versions prior to 2.6.3, update to version 2.6.3 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to only necessary and validated extensions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2014-3782

Affected Products

Dotclear

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2014-3782 · Security Note
• http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3 · Vendor Advisory
• http://seclists.org/fulldisclosure/2014/May/116 · Note
• http://seclists.org/fulldisclosure/2014/May/108 · Note
• http://secunia.com/advisories/58675 · Note
• http://karmainsecurity.com/KIS-2014-06 · Note
• http://seclists.org/fulldisclosure/2014/May/122 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3782 · Note