Description

The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing the extension of an uploaded file.

Remediation

References

CVE-2010-5091

Related Vulnerabilities

Liferay DXP Incorrect Authorization Vulnerability (CVE-2024-25149)

WordPress Plugin EMC2 Custom Help Videos Cross-Site Scripting (1.2)

WordPress Plugin YT-Audio:Audio Hosting From YouTube in WordPress 'v' Parameter Cross-Site Scripting (1.7)

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14946)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4033)

Severity

Medium

Classification

CVE-2010-5091 CWE-94

Tags

Missing Update Known Vulnerabilities