Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:CLIPBUCKET-FILE-UPLOAD |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
ClipBucket CVE-2018-7665 File Upload |
Release Date |
2019/02/08 |
Update Number |
3140 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: ClipBucket CVE-2018-7665 File Upload
This signature detects attempts to exploit a known vulnerability against ClipBucket. Successful attack could allow the attacker to execute arbitrary PHP code on the vulnerable system.
Extended Description
An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beats_uploader.php or actions/photo_uploader.php, or the coverPhoto parameter to edit_account.php.
Affected Products
- Clip-bucket clipbucket 4.0.0
References
- CVE: CVE-2018-7665