8.8High
CVE-2014-125138C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields
Description
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields. Editor-role users can upload PHP scripts via the page_image or cat_image parameters to the web-accessible /public/image directory and request them to execute code on the server.
Weakness (CWE):
CWE-434
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| c97 | cart engine | ≤ 3.0.0 | |
| C97net | Cart Engine | ≤ 3.0.0 | |
| C97net | Kemana Directory | ≤ 1.5.6 | |
| C97net | qEngine CMS | ≤ 6.0.0 |
References and patches
- Zero Science Lab Advisory ZSL-2014-5174: qEngine CMS 6.0.0 Remote Code Execution third-party-advisory
- Zero Science Lab Advisory ZSL-2014-5178: Kemana Directory 1.5.6 Remote Code Execution third-party-advisory
- Zero Science Lab Advisory ZSL-2014-5182: Cart Engine 3.0.0 Remote Code Execution third-party-advisory
- ExploitDB-32511: qEngine CMS 6.0.0 Multiple Vulnerabilities exploit
- ExploitDB-32507: Kemana Directory 1.5.6 Remote Code Execution exploit
- ExploitDB-32503: Cart Engine 3.0.0 Remote Code Execution exploit
- VulnCheck Advisory: C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields third-party-advisory