CVE-2019-17046

Monday, September 30, 2019

N/A

N/A

Summary

Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.

Affected Software

Vendor	Product	Version Range	Status
n/a	n/a	`n/a`	affected

Weaknesses

n/a

ADP Enrichment

CVE Program Container

Additional References

https://syhack.wordpress.com/2019/09/29/ilch-content-management-system-v-2-1-22-insecure-file-upload-lfi-remote-code-execution-critical-vulnerability-disclosure/

References

https://syhack.wordpress.com/2019/09/29/ilch-content-management-system-v-2-1-22-insecure-file-upload-lfi-remote-code-execution-critical-vulnerability-disclosure/

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.