Vulnerability CVE-2018-6383

Vulnerability CVE-2018-6383

Published: 2018-01-29

Description:

Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a file, a different vulnerability than CVE-2017-18048.

See advisories in our WLB2 database:

	Topic	Author	Date
High	Monstra CMS 3.0.4 Remote Code Execution (Authenticated)	Ron Jost (hacker...	06.06.2021

Type:

CWE-184

(Incomplete Blacklist)

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.5/10	6.4/10	8/10

Exploit range	Attack complexity	Authentication
Remote	Low	Single time
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Monstra -> Monstra

References:

https://github.com/monstra-cms/monstra/issues/429

Copyright 2024, cxsecurity.com