qdPM 9.1 Authenticated Shell Upload
Posted by deepcore on September 30, 2022 – 5:51 am
A remote code execution vulnerability exists in qdPM versions 9.1 and below. An attacker can upload a malicious PHP code file via the profile photo functionality by leveraging a path traversal vulnerability in the users[‘photop_preview’] delete photo feature thus allowing bypass of .htaccess protection. NOTE: this issue exists because of an incomplete fix for CVE-2015-3884.
Post a reply
You must be logged in to post a comment.