CVE-2008-3232
18.07.2008, 16:41
Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images.
| Vendor | Product | Version |
|---|---|---|
| dotclear | dotclear | 𝑥 ≤ 1.2.7 |
| dotclear | dotclear | 1.2.1 |
| dotclear | dotclear | 1.2.2 |
| dotclear | dotclear | 1.2.3 |
| dotclear | dotclear | 1.2.4 |
| dotclear | dotclear | 1.2.5 |
| dotclear | dotclear | 1.2.6 |
𝑥
= Vulnerable software versions
References