CVE-2024-58281 — Dotclear 2.29 Remote Code Execution via Authenticated File Upload
Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers …
Published: 2025-12-10 · CVSS: 8.7 · CVSS 4.0
Dotclear 2.29 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload process by crafting a PHP shell with a command execution form to gain system access through the uploaded file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7