CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8.
Configurations

Configuration 1 (hide)

cpe:2.3:a:pluck-cms:pluckcms:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-07-16 13:15

Updated : 2024-02-28 17:08


NVD link : CVE-2019-1010062

Mitre link : CVE-2019-1010062

CVE.ORG link : CVE-2019-1010062


JSON object : View

Products Affected

pluck-cms

  • pluckcms
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type