Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-af16-fznf-9kbc |
|---|
| Summary | An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allowing remote attackers to upload malicious PHP files via a crafted multipart/form-data POST request. Once uploaded, the attacker can access the file directly under havalite/tmp/files/, resulting in remote code execution. |
|---|
| Aliases |
|
|---|
| Fixed_packages |
|
|---|
| Affected_packages |
|
|---|
| References |
|
|---|
| Weaknesses |
| 0 |
| cwe_id |
434 |
| name |
Unrestricted Upload of File with Dangerous Type |
| description |
The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. |
|
|
|---|
| Exploits |
| 0 |
| date_added |
null |
| description |
This module exploits a file upload vulnerability found in Havalite CMS 1.1.7, and
possibly prior. Attackers can abuse the upload feature in order to upload a
malicious PHP file without authentication, which results in arbitrary remote code
execution. |
| required_action |
null |
| due_date |
null |
| notes |
Reliability:
- unknown-reliability
Stability:
- unknown-stability
SideEffects:
- unknown-side-effects
|
| known_ransomware_campaign_use |
false |
| source_date_published |
2013-06-17 |
| exploit_type |
null |
| platform |
Linux,PHP |
| source_date_updated |
null |
| data_source |
Metasploit |
| source_url |
https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/unix/webapp/havalite_upload_exec.rb |
|
|
|---|
| Severity_range_score | 9.3 - 9.3 |
|---|
| Exploitability | null |
|---|
| Weighted_severity | null |
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-af16-fznf-9kbc |
|---|