This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2019-1010062 | BDVDB-2026-119231 Detail

pluck-cmsPluckCMS

Description#

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8.

Impact#

No impact statement in the source data.

Weaknesses#

  • CWE-434 Unrestricted Upload of File with Dangerous Type

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.