Description
TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers can authenticate, retrieve a CSRF token from the plugin event page, and upload malicious PHP files to the textpattern/tmp/ directory for code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Textpattern | TextPattern CMS | 4.9.0-dev | — |
References
- ExploitDB-50095 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: TextPattern CMS 4.9.0-dev Authenticated Remote Code Execution via Plugin Upload third-party-advisory