Just a Learner's Blog

Search This Blog

Hello World!!

July 31, 2017

Get link
Facebook
X
Pinterest
Email
Other Apps

Hello World!!!

I am Ishaq Mohammed

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

CVE-2017-18048 - Monstra CMS 3.0.4 - Arbitrary File Upload / Remote Code Execution

Security Advisory: CVE-2017-18048- Monstra CMS 3.0.4 - Arbitrary File Upload / Remote Code Execution OVERVIEW Severity Rating : High Confirmed Affected Versions: 3.0.4 Vendor: MonstraCMS Vendor URL: http://monstra.org/ Vector: Remote Status: Public CVE: CVE-2017-18048 ExploitDB URL: https://www.exploit-db.com/exploits/43348/ SSD Advisory : https://blogs.securiteam.com/index.php/archives/3559 PRODUCT DESCRIPTION Monstra is a modern and lightweight Content Management System. SUMMARY AND IMPACT MonstraCMS 3.0.4 allows users to upload arbitrary files which leads to a remote command execution on the remote server. In MonstraCMS an Editor can upload files to the Monstra CMS and can access them by clicking on them from the administrator portal During this research, I found that the Monstra CMS is allowing an user with editor privileges to upload files forbidding all types of executable files which are...

Tweets by security_prince

Powered by Blogger

security_prince

Hello World!!

Comments

Post a Comment