Description

Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory.

Remediation

References

CVE-2011-5083

Related Vulnerabilities

Oracle JRE CVE-2017-10347 Vulnerability (CVE-2017-10347)

WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.2)

PHP CVE-2014-3479 Vulnerability (CVE-2014-3479)

Undertow Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-1745)

Envoy Proxy CVE-2024-7207 Vulnerability (CVE-2024-7207)

Severity

High

Classification

CVE-2011-5083 CWE-264

Tags

Missing Update Known Vulnerabilities