Description

The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2.2.3 does not properly restrict pathnames, which allows remote authenticated users to upload and execute arbitrary PHP code via the media_path or media_file parameter. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2011-1584

Related Vulnerabilities

CubeCart Improper Input Validation Vulnerability (CVE-2013-1465)

WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Multiple Vulnerabilities (1.5.2)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-5674)

WordPress Plugin BuddyPress Security Bypass (2.3.4)

Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5505)

Severity

Medium

Classification

CVE-2011-1584 CWE-264

Tags

Missing Update Known Vulnerabilities