Description
Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images.
Remediation
References
Related Vulnerabilities
UAParser.js Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2021-4229)
WordPress Plugin Archive Posts Sort Customize Cross-Site Scripting (1.5)
WordPress Plugin Blue Wrench Video Widget Cross-Site Scripting (2.1.0)
Craft CMS CVE-2017-8383 Vulnerability (CVE-2017-8383)
Python Integer Overflow or Wraparound Vulnerability (CVE-2008-4864)