Skip to content
OpenAdvisories

Package · Ubuntu

dotclear

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-53952

    Dotclear 2.25.3 Authenticated Remote Code Execution via File Upload

    Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that exec…

    dotclear Dotclear dotclear Ubuntu
  • High 8.7
    CVE-2024-58281

    Dotclear 2.29 Remote Code Execution via Authenticated File Upload

    Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command executi…

    dotclear Dotclear dotclear Ubuntu