7 matches found
CVE-2013-0803
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code...
Design/Logic Flaw
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code...
CVE-2013-0803
Vulnerability summary: PolarBear CMS 2.5 contains a PHP file upload flaw in upload.php that could let an attacker execute arbitrary code. The root cause is improper handling of uploaded files, enabling remote code execution without authentication. Availability of public details: Public advisories...
CVE-2013-0803
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code...
PT-2020-7338
Name of the Vulnerable Software and Affected Versions: PolarBear CMS version 2.5 Description: A PHP file upload issue exists, which could allow a malicious user to execute arbitrary code via the upload.php endpoint. Recommendations: For PolarBear CMS version 2.5, consider restricting access to th...
CVE-2013-0803: Unrestricted Upload of File with Dangerous Type
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code...
PolarBear CMS PHP File Upload Vulnerability
This module exploits a file upload vulnerability found in PolarBear CMS By abusing the upload.php file, a malicious user can upload a file to a temp directory without authentication, which results in arbitrary code execution. Module Options msf use exploit/multi/http/polarcms/uploadexec msf...