Back to CVE Browser

CVE-2016-7902

HIGH

8.8

CVSS Severity Score

EPSS Score0.1300%

EPSS Percentile13.21th

PublishedJan 4, 2017

Last ModifiedMay 6, 2026

Vulnerability Description

Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permissions to manage media items to execute arbitrary code by uploading a ZIP file containing a file with a crafted extension, as demonstrated by .php.txt or .php%20.

Affected Platforms (CPE)

📦

Dotclear

Dotclear

<= 2.10.2

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2016/10/05/6

🔗 http://www.securityfocus.com/bid/93440

🔗 https://dotclear.org/blog/post/2016/11/01/Dotclear-2.10.3

🔗 https://hg.dotclear.org/dotclear/rev/a9db771a5a70

🔗 http://www.openwall.com/lists/oss-security/2016/10/05/6

🔗 http://www.securityfocus.com/bid/93440

🔗 https://dotclear.org/blog/post/2016/11/01/Dotclear-2.10.3

🔗 https://hg.dotclear.org/dotclear/rev/a9db771a5a70

Related Vulnerabilities

CVE-2005-395710.0

Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors.

CVE-2008-32329.3

Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated users to e...

CVE-2015-88328.8

Multiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2.8.2 allow remote authenticated us...

CVE-2005-39637.5

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via ...