CVE-2015-1371
HighSummary
The unrestricted file upload vulnerability in ferretCMS version 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request.
Risk Assessment
This vulnerability poses a serious security risk to the system, allowing remote code execution, which could lead to full server compromise.
Recommendation
It is recommended to update ferretCMS to the latest version and implement strict controls on file uploads to prevent the uploading of files with dangerous extensions.
Other vulnerabilities in ferretCMS 1.0.4-alpha
Original NVD description (English source)
Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in custom/uploads/.