vendor:
Croogo
by:
Gjoko 'LiquidWorm' Krstic
7,5
CVSS
HIGH
Arbitrary PHP Code Execution
78
CWE
Product Name: Croogo
Affected Version From: 2.0.0
Affected Version To: 2.0.0
Patch Exists: YES
Related CWE: N/A
CPE: a:fahad_ibnay_heylaal:croogo
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Apache/2.4.7 (Win32), PHP/5.5.6, MySQL 5.6.14
2014
Croogo 2.0.0 Arbitrary PHP Code Execution Exploit
Croogo suffers from an authenticated arbitrary PHP code execution. The vulnerability is caused due to the improper verification of uploaded files in '/admin/file_manager/attachments/add' script thru the 'data[Attachment][file]' POST parameter and in '/admin/file_manager/file_manager/upload' script thru the 'data[FileManager][file]' POST parameter. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script file that will be stored in '/webroot/uploads/' directory.
Mitigation:
Ensure that uploaded files are properly verified before being stored on the server.