Description

Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory.

Remediation

References

CVE-2011-5083

Related Vulnerabilities

WordPress Plugin Quick Paypal Payments Multiple Vulnerabilities (5.7.25)

Oracle JRE CVE-2013-5838 Vulnerability (CVE-2013-5838)

WordPress Plugin FoxyShop Cross-Site Scripting (4.6)

Apache Tomcat version older than 5.5.26

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42118)

Severity

High

Classification

CVE-2011-5083 CWE-264

Tags

Missing Update Known Vulnerabilities