CVE-2019-11447
HIGH 8.8EPSS 52.3%
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a file can be changed and the control can be bypassed for code execution. (An attacker can use the GIF header for this.)
- CVSS v3.0
- 8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 52.27% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2019-04-22
- Updated
- 2024-08-04
Proof-of-concept exploits (7)
- http://pentest.com.tr/exploits/CuteNews-2-1-2-Remote-Code-Execution-Metasploit.html
- CRFSlick/CVE-2019-11447-POC1★ · 2024-02-11
- ColdFusionX/CVE-2019-11447_CuteNews-AvatarUploadRCE0★ · 2021-03-17
- khuntor/CVE-2019-11447-EXP1★ · 2020-10-30
- mt-code/CVE-2019-114470★ · 2020-10-20
- substing/CVE-2019-11447_reverse_shell_upload0★ · 2023-12-28
- thewhiteh4t/cve-2019-114479★ · 2021-03-18