Description
Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command execution form to gain system access through the uploaded file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| dotclear | Dotclear | 2.29 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | dotclear | No fix yet | — |
References
- ExploitDB-52037 exploit
- Vendor Homepage vendor-advisory
- Software Link product
- VulnCheck Advisory: Dotclear 2.29 Remote Code Execution via Authenticated File Upload third-party-advisory