Arbitrary file upload in Fork CMS

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-28931 · ADVISORY
• forkcms/forkcms#3351 · WEB
• bousalman/ForkCMS-arbitrary-upload · WEB
• forkcms/forkcms release 5.9.2 · WEB

Autres vulnérabilités de forkcms/forkcms

• CVE-2022-35590MOYENNE 4.8A cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "end_date" Parameter
• CVE-2022-35589MOYENNE 4.8A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_time" Paramete…
• CVE-2022-35587MOYENNE 4.8A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_date" Paramete…
• CVE-2022-35585MOYENNE 4.8A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "start_date" Par…
• CVE-2022-1064ÉLEVÉE 8.8SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.