CVE Catalog
CVE-2015-2780
CriticalSummary
The vulnerability in Berta CMS allows unrestricted file uploads, enabling remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute code, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to implement restrictions on file uploads and to scan uploaded files for dangerous extensions.
Original NVD description (English source)
Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.