Back to search
CVE-2019-1010062
Published: Jul 16, 2019
Modified: Aug 5, 2024
PUBLISHED
Description
PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8.
| Vendor | Product | Versions |
|---|---|---|
pluck-cms | PluckCMS | affected ≤ 4.7.4 [fixed: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8] |
Weaknesses (CWE)
References
https://github.com/pluck-cms/pluck/issues/44
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now