CVE-2013-0803

A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code

published February 11, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
75%
Percentile
99.5
In the wild
Unconfirmed
What it is

⚠️ A PHP file upload vulnerability lurking in PolarBear CMS 2.5 could let a sneaky attacker execute any code they fancy — think of it as a crafty chef slipping a dubious ingredient into your favorite dish! This flaw is like a restaurant that lets anyone bring in their own ingredients without a second glance; a malicious user could easily serve up a dangerous plate that compromises the entire kitchen. 🍽️ If exploited, this vulnerability allows an attacker to run arbitrary code on your server, potentially leading to a complete takeover. Imagine a sly intruder not only stealing the recipe but also transforming the entire menu!

Put simply

This flaw is like a restaurant that lets anyone bring in their own ingredients without a second glance; a malicious user could easily serve up a dangerous plate that compromises the entire kitchen. 🍽️ The PHP file upload vulnerability in PolarBear CMS 2.5 allows unauthorized users to upload and execute malicious scripts via upload.php — the chef’s special, but with a rotten twist!

What to do

If exploited, this vulnerability allows an attacker to run arbitrary code on your server, potentially leading to a complete takeover. Imagine a sly intruder not only stealing the recipe but also transforming the entire menu! To secure your setup, immediately patch PolarBear CMS to the latest version and restrict file uploads to only trusted users. Consider implementing additional validation checks on uploaded files to ensure no unwanted surprises slip through! You’ve got this! Fixing this vulnerability will help you keep your digital kitchen safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.74977 · 99.5th percentile
Published
2020-02-11T16:55Z
EPSS history
Timeline
  • 11 FEB 16:55Z
    A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code
    cvelistv5