Description
Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command execution form to gain system access through the uploaded file.
Remediation
References
Related Vulnerabilities
MySQL CVE-2024-21047 Vulnerability (CVE-2024-21047)
Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7503)
SharePoint Use After Free Vulnerability (CVE-2025-49703)
Django Improper Input Validation Vulnerability (CVE-2014-0480)
MongoDb Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-20924)