Lucene search
HistoryAug 03, 2023 - 2:15 a.m.
CVE-2023-36212
file upload
total cms v.1.7.4
remote attacker
arbitrary code
crafted php file
edit page function
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.008
Percentile
81.4%
File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function.
Affected configurations
Node
totalcmstotal_cmsMatch1.7.4
Related
cvelist
cvelist
CVE-2023-36212
2023-08-03 00:00:00
cve
cve
CVE-2023-36212
2023-08-03 02:15:09
prion
prion
Unrestricted file upload
2023-08-03 02:15:00
cnvd
cnvd
Total CMS File Upload Vulnerability
2023-08-06 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.008
Percentile
81.4%
Related for NVD:CVE-2023-36212