Unrestricted File Upload Vulnerability in ContentNow CMS by ContentNow
CVE-2008-3181
Currently unrated
Key Information:
- Vendor
Content Now
- Status
- Vendor
- CVE Published:
- 15 July 2008
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-3181?
The ContentNow CMS version 1.4.1 is susceptible to an unrestricted file upload vulnerability in the upload.php script. This flaw enables remote authenticated users to upload files with executable extensions. Once a malicious file is uploaded, the attacker can execute arbitrary code by directly accessing the uploaded file through a request. This type of vulnerability poses significant security risks, including potential exploitation leading to system compromise.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.