CVE-2020-20969: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2020-20969

CVE-2020-20969 affects PluckCMS v4.7.10. An arbitrary file upload vulnerability in trashcan_restoreitem.php enables remote code execution (as per multiple sources), with PoCs noting an authenticated-admin requirement in some demonstrations. The vulnerability is consistently described as a file up...

PT-2023-11559 · Pluck Cms · Pluck Cms

Name of the Vulnerable Software and Affected Versions: PluckCMS version 4.7.10 Description: The issue allows a remote attacker to execute arbitrary code via a crafted image file to the save file parameter. This enables the attacker to potentially gain control over the system. Recommendations: For...

PluckCMS code-related vulnerabilities

PluckCMS is a content management system CMS developed using the PHP language. An arbitrary file upload vulnerability exists in PluckCMS version 4.7.10. An attacker can exploit this vulnerability to execute arbitrary code via the trashcanrestoreitem.php file...

PluckCMS code-related vulnerabilities

PluckCMS is an application that provides an easy-to-use content management system that allows users to create and manage websites with simple operations. It has a user-friendly interface and powerful features to fulfill various needs of users. PluckCMS File Upload Vulnerability. This vulnerabilit...

CVE-2020-20718

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...

CVE-2020-20969

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2020-20969

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

Design/Logic Flaw

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

CVE-2019-1010062

Summary: CVE-2019-1010062 affects PluckCMS 4.7.4 and earlier. The vulnerability is CWE-434: Unrestricted Upload of File with Dangerous Type, enabling potential webshell access. The issue is traced to data/inc/images.php at line 36, with the attack vector described as manipulating the MIME TYPE in...

CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

PT-2019-11455

Name of the Vulnerable Software and Affected Versions: PluckCMS versions 4.7.4 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially leading to the execution of a webshell. This is achieved by modifying the MIME TYPE in an HTTP request to...

CVE-2019-1010062: Unrestricted Upload of File with Dangerous Type

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...