Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-54437
HistoryJun 28, 2023 - 12:00 a.m.

PluckCMS Arbitrary File Upload Vulnerability

2023-06-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
pluckcms
arbitrary file upload
vulnerability
php
code execution
trashcan restoreitem

0.005 Low

EPSS

Percentile

76.6%

PluckCMS is a content management system (CMS) developed using the PHP language. An arbitrary file upload vulnerability exists in PluckCMS version 4.7.10. An attacker can exploit this vulnerability to execute arbitrary code via the trashcan_restoreitem.php file.

CPENameOperatorVersion
pluckcms pluckcmseq4.7.10

0.005 Low

EPSS

Percentile

76.6%

Related for CNVD-2023-54437