CVE-2016-9268
HighSummary
In Dotclear versions up to 2.10.4, there is an unrestricted file upload vulnerability in the 'Install or upgrade manually' module that allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with a zip extension.
Risk Assessment
This vulnerability poses a serious risk to organizations by allowing attackers to execute remote code, potentially leading to system takeover.
Recommendation
It is recommended to update Dotclear to the latest version to mitigate this vulnerability and restrict file upload capabilities to trusted users.
Other vulnerabilities in Dotclear
See all- CVE-2015-8832High
Multiple incomplete blacklist vulnerabilities in Dotclear before version 2.8.2 allow remote authenticated users with permissions to manage their own media items and entries/comments to execute arbitrary PHP code by uploading a file with a .pht, .phps, or .phtml extension.
- CVE-2016-7902High
In Dotclear before version 2.10.3, there is an unrestricted file upload vulnerability in the fileUnzip->unzip method that allows remote authenticated users with permissions to manage media items to execute arbitrary code by uploading a ZIP file containing a file with a crafted extension.
- CVE-2014-1613High
Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dc_passwd cookie to a password-protected page, which is not properly handled by inc/public/lib.urlhandlers.php or plugins/pages/_public.php.
Original NVD description (English source)
Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified vectors.