CVE-2018-11392

{"id": "CVE-2018-11392", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2018-05-29T20:29:02.563", "references": [{"url": "http://packetstormsecurity.com/files/147878/PHP-Login-And-User-Management-4.1.0-Shell-Upload.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/542038/100/0/threaded", "source": "cve@mitre.org"}, {"url": "https://codecanyon.net/item/php-login-user-management/49008", "tags": ["Release Notes"], "source": "cve@mitre.org"}, {"url": "https://doddsecurity.com/94/remote-code-execution-in-the-avatars/", "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.com/files/147878/PHP-Login-And-User-Management-4.1.0-Shell-Upload.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/542038/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://codecanyon.net/item/php-login-user-management/49008", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://doddsecurity.com/94/remote-code-execution-in-the-avatars/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "An arbitrary file upload vulnerability in /classes/profile.class.php in Jigowatt \"PHP Login & User Management\" before 4.1.1, as distributed in the Envato Market, allows any remote authenticated user to upload .php files to the web server via a profile avatar field. This results in arbitrary code execution by requesting the .php file."}, {"lang": "es", "value": "Una vulnerabilidad de subida de archivos arbitrarios en /classes/profile.class.php en Jigowatt \"PHP Login User Management\" en versiones anteriores a la 4.1.1, tal y como se distribuye en Envato Market, permite que cualquier usuario autenticado remoto suba archivos .php al servidor web mediante un campo profile avatar. Esto resulta en la ejecuci\u00f3n de c\u00f3digo arbitrario solicitando el archivo .php."}], "lastModified": "2024-11-21T03:43:16.617", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jigowatt:php_login_\\&_user_management:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DAB60A8-94C2-4423-86D1-D362C8CE79C6", "versionEndExcluding": "4.1.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}