CVE-2011-5083

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-03-19 · updated 2026-06-16
Weakness: CWE-264

Description

Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory.

Affected products

Dotclear: 2.3.1, 2.4.2

References

http://cxsecurity.com/issue/WLB-2011090012
http://vigilance.fr/vulnerability/Dotclear-file-upload-via-swfupload-swf-11396
http://www.exploit-db.com/exploits/18529
http://www.osvdb.org/79665
http://www.securityfocus.com/bid/52173
http://cxsecurity.com/issue/WLB-2011090012
http://vigilance.fr/vulnerability/Dotclear-file-upload-via-swfupload-swf-11396
http://www.exploit-db.com/exploits/18529
http://www.osvdb.org/79665
http://www.securityfocus.com/bid/52173

Get alerted when CVE-2011-5083 or the next vulnerability affects your stack