Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Dotclear Improper Access Control Vulnerability - CVE-2015-8832 - Vulnerability Database
Dotclear

Dotclear Improper Access Control Vulnerability - CVE-2015-8832

High
Reference: CVE-2015-8832
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-8832
Title: Dotclear Improper Access Control Vulnerability
Overview:

Multiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2.8.2 allow remote authenticated users with quotmanage their own media itemsquot and quotmanage their own entries and commentsquot permissions to execute arbitrary PHP code by uploading a file with a (1) .pht (2) .phps or (3) .phtml extension.