high7.2Public exploit code
CVE-2024-44871
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted f…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MoziloCMS 3.0 - Remote Code Execution (RCE)2025-03-27 · webapps · php
Impact
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilo | Mozilocms | Version 3.0 |