high8.8Public exploit code
CVE-2019-11447
An issue was discovered in CutePHP CuteNews 2.1.2.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CuteNews 2.1.2 - Remote Code Execution2020-09-10 · webapps · php · Verified
- CuteNews 2.1.2 - 'avatar' Remote Code Execution (Metasploit)2019-04-15 · remote · php · Verified
Impact
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a file can be changed and the control can be bypassed for code execution. (An attacker can use the GIF header for this.)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cutephp | Cutenews | Version 2.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159134/CuteNews-2.1.2-Remote-Code-Execution.html
- http://pentest.com.tr/exploits/CuteNews-2-1-2-Remote-Code-Execution-Metasploit.html
- https://www.exploit-db.com/exploits/46698/
- http://packetstormsecurity.com/files/159134/CuteNews-2.1.2-Remote-Code-Execution.html
- http://pentest.com.tr/exploits/CuteNews-2-1-2-Remote-Code-Execution-Metasploit.html
- https://www.exploit-db.com/exploits/46698/