vendor:
Star Articles
by:
ZoRLu
8.8
CVSS
HIGH
Remote File Upload
434
CWE
Product Name: Star Articles
Affected Version From: 6
Affected Version To: 6
Patch Exists: NO
Related CWE: N/A
CPE: a:star_articles:star_articles:6.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Star Articles 6.0 Remote File Upload
A vulnerability in Star Articles 6.0 allows an attacker to upload a malicious file to the server. The attacker can exploit this vulnerability by registering for the website, logging in, editing their profile, clicking the ‘Browse’ button, selecting a malicious file, and uploading it. The attacker can then access the malicious file by right-clicking on their profile photo and copying the link. The attacker can then access the malicious file by entering the link into their browser.
Mitigation:
The vendor should ensure that only authorized users are allowed to upload files to the server.
