GitHub Advisoryadvisory · Packagist

GHSA-77j2-7whr-6vpx Elefant CMS Code Execution Vulnerability

CRITICAL Published 2022-05-14 Modified 2023-07-25 Official page ↗
Aliases
CVE-2018-16974
Ecosystem
Packagist
Packages
elefant/cms
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-434
Reviewed
2023-07-25

Affected packages

• Packagist elefant/cms: < 2.0.7 → fixed in 2.0.7

Description

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in `apps/filemanager/upload/drop.php` by using `/filemanager/api/rm/.htaccess` to remove the .htaccess file, and then using a filename that ends in .php followed by space characters (for bypassing the blacklist).

Related

Alias · CVE (1)

  • CVE-2018-16974 An issue was discovered in Elefant CMS before 2.0.7. vulnerability

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References