ShishuoCMS Unrestricted File Upload Vulnerability in ManageUpLoadAction
Vulnerability
A critical vulnerability allowing unrestricted file uploads has been identified in ShishuoCMS version 1.1. The issue arises in the ManageUpLoadAction class, specifically within the handleRequest function. The vulnerability can be exploited remotely by manipulating the file upload argument.
Impact
Exploitation of this vulnerability allows for unrestricted file uploads, which could lead to the execution of malicious files on the server.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
6.6remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.