PHP Code Execution Vulnerability in Dotclear by Dotclear
CVE-2014-1613

Currently unrated

Key Information:

Vendor

Dotclear

Status
Dotclear
Vendor
CVE Published:
16 May 2014

What is CVE-2014-1613?

A vulnerability in Dotclear allows remote attackers to execute arbitrary PHP code by exploiting a serialized object in the dc_passwd cookie when accessing password-protected pages. This issue arises from improper handling in the inc/public/lib.urlhandlers.php and plugins/pages/_public.php files. Affected versions prior to 2.6.2 are susceptible to this security risk, which could potentially lead to unauthorized access and manipulation of the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://labs.mwrinfosecurity.com/advisories/2014/05/14/do...
x_refsource_MISC
http://dotclear.org/blog/post/2014/01/20/Dotclear-2.6.2
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.