chillyCMS Security Bypass and Arbitrary File Upload Vulnerabilities

Bugtraq ID:	57983
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 14 2013 12:00AM
Updated:	Feb 14 2013 12:00AM
Credit:	Abhi M Balakrishnan
Vulnerable:	chillyCMS chillyCMS 1.3
Not Vulnerable:

chillyCMS Security Bypass and Arbitrary File Upload Vulnerabilities

chillyCMS is prone to security-bypass and arbitrary file-upload vulnerabilities.

Attackers can leverage these issues to bypass certain security restrictions and to upload and execute arbitrary code in the context of the application.

chillyCMS 1.3.0 is vulnerable; other versions may also be affected.

chillyCMS Security Bypass and Arbitrary File Upload Vulnerabilities

Attackers can exploit these issues with a web browser.

chillyCMS Security Bypass and Arbitrary File Upload Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

chillyCMS Security Bypass and Arbitrary File Upload Vulnerabilities

References:

• chillyCMS Homepage (chillyCMS)