CVE-2017-18048

EPSS 63.4%

Vexday Risk Score

30Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 63.4%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

18 Dec 2017Metasploit module available

23 Jan 2018Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.

Affected products

n/a · n/a

References

https://blogs.securiteam.com/index.php/archives/3559 https://github.com/monstra-cms/monstra/issues/426 https://securityprince.blogspot.in/2017/12/monstra-cms-304-arbitrary-file-upload.html https://www.exploit-db.com/exploits/43348/