vendor:
CMS (ASP.NET)
by:
Net.Edit0r
9,3
CVSS
HIGH
Shell Upload Vulnerability
434
CWE
Product Name: CMS (ASP.NET)
Affected Version From: 3.x
Affected Version To: 4.0
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2010
Sitefinity CMS (ASP.NET) Shell Upload Vulnerability
Sitefinity CMS (ASP.NET) is vulnerable to a shell upload vulnerability. An attacker can upload a malicious ASP file with a double extension such as .asp;.jpg to the /UserControls/Dialogs/ImageEditorDialog.aspx page and then upload it to the /Images/ directory. This will allow the attacker to execute arbitrary code on the server.
Mitigation:
Ensure that the web application is configured to only allow the upload of files with the expected file extensions. Additionally, ensure that the web application is configured to only allow the upload of files with the expected MIME types.
