Miggo Logo
Miggo Vulnerability Database
→
CVE-2017-20063

CVE-2017-20063: Unrestricted Upload of File with Dangerous Type in Elefant CMS

8.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2017-20063
GHSA ID
GHSA-mwh6-g9wx-xcx3
EPSS Score
0.50253%
CWE
CWE-434
Published
6/21/2022
Updated
1/27/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
elefant/cmscomposer< 1.3.131.3.13

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability explicitly affects the /filemanager/upload/drop endpoint's file upload functionality. The PoC demonstrates uploading a .php5 file containing PHP code, which was improperly allowed. While exact function names aren't provided in disclosures, the endpoint's handler function is clearly responsible for insufficient file type validation. The CWE-434 classification and attack pattern confirm this is an unrestricted dangerous file type upload issue.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

* vuln*r**ility w*s *oun* in *l***nt *MS *.*.**-R*. It **s ***n *l*ssi*i** *s *riti**l. *****t** is *n unknown *un*tion o* t** *il* /*il*m*n***r/uplo**/*rop o* t** *ompon*nt *il* Uplo**. T** m*nipul*tion l***s to improp*r privil*** m*n***m*nt. It is

Reasoning

T** vuln*r**ility *xpli*itly *****ts t** `/*il*m*n***r/uplo**/*rop` *n*point's *il* uplo** *un*tion*lity. T** Po* **monstr*t*s uplo**in* * `.p*p*` *il* *ont*inin* P*P *o**, w*i** w*s improp*rly *llow**. W*il* *x**t `*un*tion n*m*s` *r*n't provi*** in