medium6.8Public exploit code
CVE-2009-3182
Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gazelle CMS 1.0 - Arbitrary File Upload2009-08-13 · webapps · php · Verified
- Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution2009-08-12 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anantasoft | Gazelle Cms | Version 1.0 |