CVE-2024-8294
CVE-2024-8294 · FeehiCMS index.php update unrestricted upload
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLink[image] leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 5.3 · Moyenne · EPSS 0,8%
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
feehicms
- Versions du logiciel
- 2.1.0: Concernée
- 2.1.1: Concernée
Aucun correctif publié
feehi/cms Packagist
- Versions du logiciel
- 0.0.1
- 0.0.2
- 0.0.3
- 0.0.4
- 0.0.5
- 0.0.6
- 0.0.7
- 0.0.8
- 0.0.9
- 0.1.0
- 0.1.1
- 0.1.2
- 0.1.3
- 1.0.0-alpha3
- 1.0.0alpha1
- 1.0.0alpha2
- 1.0.0beta1
- 1.0.0beta2
- 1.0.0beta3
- 1.0.0rc1
- 1.0.0rc2
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.3
- 2.0.4
- 2.0.4.1
- 2.0.5
- 2.0.5.1
- 2.0.6
- 2.0.7
- 2.0.7.1
- 2.0.8
- 2.0.8.1
- 2.1.0
- 2.1.0-beta
- 2.1.0-beta2
- 2.1.0.1
- 2.1.0.2
- 2.1.1
- Plages de versions concernées
- ECOSYSTEM: ≤ 2.1.1
Aucun correctif publié