CVE-2011-1584

Published: Jun 8, 2011Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2.2.3 does not properly restrict pathnames, which allows remote authenticated users to upload and execute arbitrary PHP code via the media_path or media_file parameter. NOTE: some of these details are obtained from third party information.

Affected (30)

Products: Dotclear: Dotclear

Dotclear

1 product

Dotclear

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Dotclear Dotclear	version ≤ 2.2.2
Dotclear Dotclear	Version 1.2.1
Dotclear Dotclear	Version 1.2.2
Dotclear Dotclear	Version 1.2.3
Dotclear Dotclear	Version 1.2.4
Dotclear Dotclear	Version 1.2.5
Dotclear Dotclear	Version 1.2.6
Dotclear Dotclear	Version 1.2.7
Dotclear Dotclear	Version 1.2.8
Dotclear Dotclear	Version 2.0.1
Dotclear Dotclear	Version 2.0.2
Dotclear Dotclear	Version 2.0
Dotclear Dotclear	Version 2.0 beta_2
Dotclear Dotclear	Version 2.0 beta_3
Dotclear Dotclear	Version 2.0 beta_4
Dotclear Dotclear	Version 2.0 beta_5.2
Dotclear Dotclear	Version 2.0 beta_5.4
Dotclear Dotclear	Version 2.0 beta_6
Dotclear Dotclear	Version 2.0 beta_7
Dotclear Dotclear	Version 2.0 rc1
Dotclear Dotclear	Version 2.0 rc2
Dotclear Dotclear	Version 2.1.1
Dotclear Dotclear	Version 2.1.3
Dotclear Dotclear	Version 2.1.4
Dotclear Dotclear	Version 2.1.5
Dotclear Dotclear	Version 2.1.6
Dotclear Dotclear	Version 2.1.7
Dotclear Dotclear	Version 2.1
Dotclear Dotclear	Version 2.2.1
Dotclear Dotclear	Version 2.2