critical9.8Public exploit code
CVE-2013-0803
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PolarPearCMS - Arbitrary '.PHP' File Upload (Metasploit)2013-02-26 · remote · php · Verified
Impact
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Polarbear Cms Project | Polarbear Cms | Version 2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/24549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82378
- https://packetstormsecurity.com/files/cve/CVE-2013-0803
- http://www.exploit-db.com/exploits/24549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82378
- https://packetstormsecurity.com/files/cve/CVE-2013-0803