vendor:
B-interference Lite CMS
by:
innrwrld & h00die
8,8
CVSS
HIGH
Remote File Upload
434
CWE
Product Name: B-interference Lite CMS
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
B-Hind CMS (tiny_mce) Remote File Upload
A vulnerability exists in B-interference Lite CMS, which allows an attacker to upload malicious files to the server. This is due to the lack of proper validation of the uploaded files. An attacker can exploit this vulnerability by sending a malicious file to the upload.php page in the tinybrowser plugin directory.
Mitigation:
The vendor should ensure proper validation of the uploaded files.
