Lucene search
GoogleOSV:GHSA-77J2-7WHR-6VPXHistoryMay 14, 2022 - 1:57 a.m.
Elefant CMS Code Execution Vulnerability
2022-05-1401:57:58
Google
osv.dev
8
elefant cms
code execution
vulnerability
filemanager
php
EPSS
0.003
Percentile
70.0%
An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/rm/.htaccess to remove the .htaccess file, and then using a filename that ends in .php followed by space characters (for bypassing the blacklist).
Related
github
github
Elefant CMS Code Execution Vulnerability
2022-05-14 01:57:58
prion
prion
Remote code execution
2018-09-12 21:29:00
osv
osv
CVE-2018-16974
2018-09-12 21:29:00
nvd
nvd
CVE-2018-16974
2018-09-12 21:29:00
cvelist
cvelist
CVE-2018-16974
2018-09-12 21:00:00
cve
cve
CVE-2018-16974
2018-09-12 21:29:00