TextPattern CMS vulnerabilities

TextPattern CMS version 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers can authenticate, retrieve a CSRF token from the plugin event page, and upload malicious PHP files to the textpattern/tmp/ directory for code execution.

TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files via the file upload functionality. Attackers can upload a PHP shell via the Files section and execute commands by accessing the uploaded file with GET parameters passed to the system function.

Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugin Upload function.