CVE-2018-20159

i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled

published December 15, 2018

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated user with the administrator role to upload arbitrary files to the main website directory. Exploitation involves uploading a ".php" file within a ".zip" file because a ZIP archive is accepted by /admin/?req=modules&action=add as a plugin, and extracted to the main directory. In order for the ".zip" file to be accepted, it must also contain a package.json file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09891 · 95.5th percentile
Published
2018-12-15T05:00Z
EPSS history
Timeline
  • 15 DEC 05:00Z
    i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled
    cvelistv5