Beveiligingsadvies

CVE-2016-9268

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-11-10 20:00:00

Laatst bijgewerkt 2024-08-06 02:42:11

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified vectors.

← Alle CVE's bekijken Bekijk op cve.org ↗