CVE-2024-31011

Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admin_template.php.
CVSS

No CVSS.

Configurations

No configuration.

History

03 Apr 2024, 12:38

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de escritura arbitraria en archivos en beescms v.4.0, permite a un atacante remoto ejecutar código arbitrario a través de una ruta de archivo que no estaba aislada y el sufijo no estaba verificado en admin_template.php.

03 Apr 2024, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-03 05:15

Updated : 2024-04-03 12:38


NVD link : CVE-2024-31011

Mitre link : CVE-2024-31011

CVE.ORG link : CVE-2024-31011


JSON object : View

Products Affected

No product.

CWE

No CWE.