CVE-2017-18048

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

63.35% chance of exploitation in the next 30 days, 99th percentile

Published

2018-01-23

Updated

2024-08-05

Proof-of-concept exploits (2)

• https://securityprince.blogspot.in/2017/12/monstra-cms-304-arbitrary-file-upload.html
• https://www.exploit-db.com/exploits/43348/

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/monstra_fileupload_ex…

References

• CVE Record
• NVD entry

Related

• CVE-2017-18047
• CVE-2017-18049
• CVE-2017-18044
• CVE-2017-18077
• CVE-2017-18032
• CVE-2017-18078