Remote code execution via trailing-period upload bypass
Published Aug 11, 2021 · Updated Aug 4, 2024
Arbitrary file upload in Maccms10 10.0 allows remote attackers to execute PHP code through the Template Management Add function. The suffix whitelist accepts a filename ending in an extra period, such as 1.php., but storage removes that period and writes executable 1.php content. Exploitation requires network access to the management function; requesting the resulting template path executes the uploaded PHP as a web shell.
Summary
What happened
Arbitrary file upload in Maccms10 10.0 allows remote attackers to execute PHP code through the Template Management Add function. The suffix whitelist accepts a filename ending in an extra period, such as 1.php., but storage removes that period and writes executable 1.php content. Exploitation requires network access to the management function; requesting the resulting template path executes the uploaded PHP as a web shell.
The record
- CVE
- CVE-2020-21359
- Published
- Aug 11, 2021
- Updated
- Aug 4, 2024
- Vendor
- Unknown vendor
- Product
- Unknown product
- Classifications
- CWE-434, T1505.003
- Attack vector
- network
- Privileges
- Unavailable
Timeline
How it unfolded
- Aug 11, 2021CVE publishedPublication date reported by the CVE source.
- Aug 4, 2024Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
What conditions does exploitation require?
What is affected?
Affected products and versions are unavailable in this record.
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Weakness, pattern, technique
Public exploit references
- Maccms10 trailing-period upload reproductionproof of concept · demonstrated
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo