Design/Logic Flaw

2023-01-3022:15:00

PRIOn knowledge base

www.prio-n.com

file upload

vulnerability

taocms v3.0.2

arbitrary code execution

php

nvd

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.

CPENameOperatorVersion
taocmseq3.0.2

CPE	Name	Operator	Version
	taocms	eq	3.0.2

References

github.com/taogogo/taocms/issues/35