Privilege escalation

2023-12-0815:15:00

PRIOn knowledge base

www.prio-n.com

privilege escalation

file upload vulnerability

doracms v2.1.8

arbitrary code execution

html

image file

7.9 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.4%

JSON

An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar.

CPENameOperatorVersion
doracmseq2.1.8

CPE	Name	Operator	Version
	doracms	eq	2.1.8

References

github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability