CVE-2016-9268

Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified...

CVE-2016-9268

Dotclear vulnerability CVE-2016-9268: Unrestricted file upload in the Blog appearance (Install or upgrade manually) affects Dotclear up to version 2.10.4. A remote attacker with authenticated super-administrator rights can upload a theme file with a .zip extension and then access it via unspecifi...