PT-2022-12564 · Elitecms · Elitecms

Published 2022-02-01 · Updated 2022-02-02 · CVE-2021-46093

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eliteCMS version 1.0

Description The issue concerns Insecure Permissions, specifically via the manage uploads.php file. This allows for potential unauthorized access or modifications.

Recommendations For eliteCMS version 1.0, consider restricting access to the manage uploads.php file until a proper fix is applied, to minimize the risk of exploitation.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2021-46093

Affected Products

Elitecms

References · 4

• 🔥 https://github.com/jsjbcyber/bug_report/blob/main/bug_a · Exploit
• https://osv.dev/vulnerability/CVE-2021-46093 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46093 · Security Note
• https://t.me/cibsecurity/36666 · Telegram Post