Textpattern CMS Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Textpattern CMS versions prior to 4.8.3. This vulnerability allows authenticated users to upload malicious PHP files. Once uploaded, these files can execute arbitrary commands by being accessed through a specific URL parameter.

Impact

Exploitation of this vulnerability allows for authenticated remote code execution on the server where Textpattern is installed.

Reproduction

To reproduce this vulnerability, log into a Textpattern CMS account on a version prior to 4.8.3. Upload a PHP file containing a payload for executing shell commands. After the file is uploaded, access it through the 'cmd' URL parameter to execute the embedded commands.

Remediation

Users are advised to upgrade to Textpattern version 4.8.3 or later.