CVE-2017-18048

Mô tả

Tham khảo

• blogs.securiteam.com/index.php/archives/3559 · Exploit
• monstra-cms/monstra · Patch
• securityprince.blogspot.in/2017/12/monstra-cms-304-arbitrary-file-upload.html · Exploit
• exploit-db.com/exploits/43348 · Exploit

Lỗ hổng khác của monstra

• CVE-2024-36773TRUNG BÌNH 4.8A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted pay…
• CVE-2024-36775TRUNG BÌNH 5.4A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted pay…
• CVE-2024-36774CAO 7.2An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.
• CVE-2021-40940NGHIÊM TRỌNG 9.8Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.
• CVE-2021-36548NGHIÊM TRỌNG 9.8A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog of Monstra v3.0.4…