Dotclear Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Dotclear version 2.29. This issue allows authenticated attackers to upload malicious PHP files via the media upload feature. Exploitation involves crafting a PHP shell that includes a command execution form, which can then be used to gain system access through the uploaded file.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Dotclear 2.29 is installed.

Reproduction

To reproduce this vulnerability, an authenticated user must upload a PHP file through the media upload functionality. The uploaded file can be crafted to include a PHP shell that allows command execution. Once the file is uploaded, it can be accessed and executed on the server.