Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-5083
vulnerability
file upload
dotclear
remote code execution
cve-2011-5083
nvd
8.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.04 Low
EPSS
Percentile
92.0%
Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory.
Affected configurations
Node
dotcleardotclearMatch2.3.1
ORdotcleardotclearMatch2.4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| dotclear:dotclear | dotclear | eq | 2.3.1 |
| dotclear:dotclear | dotclear | eq | 2.4.2 |
Related
ubuntucve
ubuntucve
CVE-2011-5083
2012-03-19 00:00:00
cvelist
cvelist
CVE-2011-5083
2022-10-03 16:15:12
nvd
nvd
CVE-2011-5083
2012-03-19 18:55:02
prion
prion
Unrestricted file upload
2012-03-19 18:55:00
8.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.04 Low
EPSS
Percentile
92.0%
Related for CVE-2011-5083