448 matches found
Monstra CMS 3.0.4 - Cross-Site Scripting
Monstra CMS 3.0.4 contains a cross-site scripting vulnerability via the registration form i.e., the login parameter to users/registration. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...
Monstra CMS <=3.0.4 - Cross-Site Scripting
Monstra CMS 3.0.4 and earlier contains a cross-site scripting vulnerability via index.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
Monstra CMS 3.0.4 - Cross-Site Scripting
Monstra CMS 3.0.4 contains a cross-site scripting vulnerability via the page feature in admin/index.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials...
monstra_cms-3.0.4--getshell
monstracms-3.0.4--getshell monstracms-3.0.4-上传getshell CVE- 2018-17418 代码分析（Code analysis）： 在monstra\plugins\box\filesmanager\ filesmanager.admin.php第150行中存在forbiddentypes变量做黑名单限制，继续跟进该变量 In the line 150 of monstra\plugins\box\filesmanager\ filesmanager.admin.php, there is a forbiddentypes variab...
CVE-2025-69906-Monstra-CMS-3.0.4-Arbitrary-File-Upload-to-RCE
이 내용을 readme.md로 만들어 붙여넣으세요. CVE-2025-69906: Monstra CMS 3.0.4 임의 파일 업로드를 통한 원격 코드 실행 RCE 작성자 : David PS Abraham 날짜 : 2026년 2월 5일 심각도 : 치명적 - 원격 코드 실행 CVSS 8.8+ CWE : 434 위험한 유형의 파일 무제한 업로드 취약점 설명 Monstra CMS v3.0.4의 파일 관리자 플러그인plugins/box/filesmanager/filesmanager.admin.php은 블랙리스트 기반 파일 확장자 검증 을...
CVE-2025-69906
Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical server configurations, this can allow an attacker to...
CVE-2025-69906
Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical server configurations, this can allow an attacker to...
CVE-2025-69906
Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical server configurations, this can allow an attacker to...
EUVD-2025-206862
Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical server configurations, this can allow an attacker to...
PT-2026-6595
Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description Monstra CMS version 3.0.4’s Files Manager plugin has an issue where arbitrary files can be uploaded. The application uses a blacklist to validate file extensions and stores uploaded files in a directory...
CVE-2025-69906
Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical server configurations, this can allow an attacker to...
Monstra CMS 安全漏洞
Monstra CMS is a lightweight content management system CMS developed by Sergey Romanenko from Ukraine using PHP. Version 3.0.4 of Monstra CMS has a security vulnerability. This vulnerability stems from the Files Manager plugin, which allows arbitrary file uploads. The application relies on...
CVE-2025-69906
Monstra CMS version 3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin, specifically within plugins/box/filesmanager/filesmanager.admin.php. The root cause is a weak blacklist-based file extension validation that fails to block various bypass techniques, such as cas...
CVE-2025-69906
Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical server configurations, this can allow an attacker to...
CVE-2025-69906: Unrestricted Upload of File with Dangerous Type
Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical server configurations, this can allow an attacker to...
CVE-2025-69906
Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical server configurations, this can allow an attacker to...
Exploit for CVE-2025-69906
make it a readme.md to paste into it CVE-2025-69906: Monstra...
📄 Monstra CMS 3.0.4 Shell Upload
Monstra CMS version 3.0.4 proof of concept remote shell upload exploit. ============================================================================================================================================= | Title : Monstra CMS 3.0.4 shell upload Vulnerability | | Author : indoushka | |...