Dotclear Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2008-3232 - Vulnerability Database

Dotclear Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2008-3232

Critical

Reference: CVE-2008-3232

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-3232

Title: Dotclear Improper Control of Generation of Code (Code Injection) Vulnerability

Overview:

Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in images.