Description

Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory.

Remediation

References

CVE-2011-5083

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4546)

Oracle Application Server Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2018-5407)

WordPress Plugin Contact Form Clean and Simple Cross-Site Scripting (4.7.0)

Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-40662)

WordPress Plugin MiniMax-Page Layout Builder Cross-Site Scripting (1.3.4)

Severity

High

Classification

CVE-2011-5083 CWE-264

Tags

Missing Update Known Vulnerabilities