Description
Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files directory. Attackers can upload malicious PHP files through the multipart form-data upload endpoint and execute them by accessing the uploaded file path to achieve remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Snewscms | Snews CMS upload sheller | 1.7 | — |
References
- ExploitDB-40706 exploit
- VulnCheck Advisory: Snews CMS 1.7 Unrestricted File Upload via snews_files third-party-advisory