CVE-2025-67435-PoC

CVE-2025-67435 연구자 : Chowdhury Faizal Ahammed PluckCMS Zip Slip 원격 코드 실행 취약점 보고서 요약 이 보고서는 PluckCMS에서 발견된 치명적인 보안 취약점에 대해 설명합니다. 이 취약점을 통해 인증된 공격자가 Zip Slip 공격 벡터를 사용하여 원격 코드 실행을 달성할 수 있습니다. 이 취약점은 모듈 업로드 기능에 존재하며, 악성 PHP 코드가 포함된 특수하게 제작된 ZIP 아카이브를 업로드하여 악용할 수 있습니다. 제품 링크: GitHub 저장소:...

Exploit for CVE-2025-67435

CVE-2025-67435 Researcher : Chowdhury Faizal Ahammed...

EUVD-2020-13499

Malware in sbrugna...

EUVD-2019-1811

Malware in sbrugna...

EUVD-2020-13748

Malware in sbrugna...

CVE-2020-20718

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...

CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

CVE-2020-20969

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

PluckCMS File Upload Vulnerability

PluckCMS is an application that provides an easy-to-use content management system that allows users to create and manage websites with simple operations. It has a user-friendly interface and powerful features to fulfill various needs of users. PluckCMS File Upload Vulnerability. This vulnerabilit...

PluckCMS Arbitrary File Upload Vulnerability

PluckCMS is a content management system CMS developed using the PHP language. An arbitrary file upload vulnerability exists in PluckCMS version 4.7.10. An attacker can exploit this vulnerability to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2020-20718

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...

CVE-2020-20969

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2020-20718

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...

CVE-2020-20969

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

Unrestricted file upload

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...

PluckCMS 代码问题漏洞

PluckCMS is an application that provides an easy-to-use content management system that allows users to create and manage websites with simple operations. It has a user-friendly interface and powerful features to fulfill various needs of users. PluckCMS File Upload Vulnerability. This vulnerabilit...

CVE-2020-20718

CVE-2020-20718 affects PluckCMS v4.7.10 development versions, where uploading a crafted image to the save_file() parameter permits remote code execution. Reported as a high-severity, network-exploitable flaw (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; 9.8). Public details consistently describ...

CVE-2020-20969

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2020-20718

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...

CVE-2020-20969: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...