8.8
HighCVSS 3.1 · from VulnCheck
CVE-2014-125138
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields
qEngine CMS · Unrestricted file upload · CWE-434AffectedqEngine CMS, Kemana Directory, Cart Engine
FixNo fix listed yet.
PublishedOct 28, 02:03 · VulnCheck
ScoredOct 28 · 8.8 · VulnCheck
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:09 UTC
What we know
No known exploitation. CISA KEV, checked 22:09 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs network access and an account. CVSS: network, low privileges.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
Description
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields. Editor-role users can upload PHP scripts via the page_image or cat_image parameters to the web-accessible /public/image directory and request them to execute code on the server.
From VulnCheck
Affected and fixed versions
ProductAffectedFixed inqEngine CMSup to 6.0.0–Kemana Directoryup to 1.5.6–Cart Engineup to 3.0.0–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known