Lucene search

GitHub Advisory DatabaseGHSA-VHGR-GFX3-FG37

HistoryApr 01, 2022 - 12:00 a.m.

Unrestricted Upload of File with Dangerous Type in WPanel 4

2022-04-0100:00:41

CWE-434

GitHub Advisory Database

github.com

wpanel

remote code execution

php file upload

dashboard avatar

posts folder

pages folder

gallery folder

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.03

Percentile

91.1%

JSON

Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard’s Avatar image, (2) Posts Folder image, (3) Pages Folder image and (4) Gallery Folder image.

Affected configurations

Vulners

Node

wpanelwpanel4-cmsRange≤4.3.1

VendorProductVersionCPE
wpanelwpanel4-cms*cpe:2.3:a:wpanel:wpanel4-cms:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wpanel	wpanel4-cms	*	cpe:2.3:a:wpanel:wpanel4-cms::::::::

References

github.com/advisories/GHSA-vhgr-gfx3-fg37

github.com/Sentinal920/WPanel4-Authenticated-RCE

latestpcsolution.wordpress.com/2021/06/05/wpanel4-cms-authenticated-rce/

nvd.nist.gov/vuln/detail/CVE-2021-34257

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.03

Percentile

91.1%

JSON

Related for GHSA-VHGR-GFX3-FG37