Privilege escalation

2023-12-1415:15:00

PRIOn knowledge base

www.prio-n.com

privilege escalation

arbitrary file upload

pluck-cms

security vulnerability

code execution

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.1%

JSON

An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.

CPENameOperatorVersion
pluckeq4.7.18

CPE	Name	Operator	Version
	pluck	eq	4.7.18

References

github.com/SecBridge/Cms_Vuls_test/blob/main/Pluckcms/Pluck_v4.7.18_Any_File_Upload_Getshell.md