CVE-2024-44871

An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.

Score

CVSS 3.1 7.2 High

Status

Analyzed - cve@mitre.org

Published

2024-09-10

Last modified

2024-09-10

Weaknesses

CWE-434

Affected products

• Mozilocms (Mozilo)

References

• https://github.com/moziloDasEinsteigerCMS/mozilo3.0
• https://github.com/sec-fortress/Exploits/tree/main/CVE-2024-44871