mm
Not a member
mm's latest activity
Tuesday, January 17 2017
-
mm commentedThe class.upload library suffers from the same vulnerability:
curl "[exponent]/framework/modules/file/connector/uploader_tinymce.php" -F "file=@/path/to/malicio...
Monday, January 16 2017
-
mm commented
curl "[exponent]/framework/modules/file/connector/elfinder.php" -F "cmd=upload" -F "target=l1_" -F "upload[]=@/path/to/malicious.php2"
Apache/2.4.18 (Ubuntu) on...
Sunday, January 15 2017
-
mm commented
Matching against mimetypes via finfo provides no safety against uploading malicious files, see e.g. http://php.net/manual/en/function.finfo-file.php#75275
Examp...
Saturday, January 14 2017
-
mm created the ticket
As it has already been pointed out (https://exponentcms.lighthouseapp.com/projects/61783/tickets/1402-e...), a blacklisting approach towards preventing maliciou...
Tuesday, January 10 2017
-
mm created the ticket
Allows deleting arbitrary files and thus bypassing .htaccess restrictions on uploadable executable PHP files due to a flaw in external/elFinder/php/elFinder.cla...
Tuesday, December 13 2016
-
mm commented
Since I saw the recent commits:
The .htaccess file extension blacklist is not the right way to fix this vulnerability.
It might work for you / your specific apa...
-
mm edited a comment
Since I saw the recent commits:
The .htaccess file extension blacklist is not the right way to fix this vulnerability.
It might work for you / your specific apa...
-
mm commented
I disagree. This condition exists right now on exponentcms.org.
I checked out the master branch https://github.com/exponentcms/exponent-cms/tree/master, install...
Monday, December 12 2016
-
mm commented
I disagree. This condition exists right now on exponentcms.org.
I checked out the master branch https://github.com/exponentcms/exponent-cms/tree/master, install...
-
mm edited a comment
I disagree. This condition exists right now on exponentcms.org.
I checked out the master branch https://github.com/exponentcms/exponent-cms/tree/master, install...