elkarte/Elkarte

elkarte/Elkarte

GitHubGitHub
GitHubgithub.com
elkarte.github.ioelkarte.github.io
Releases31
Frequency3 months 3 weeks
Last Release
Stars187
ElkArte Forum. A free, open source, modern discussion forum / BB
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-58295↗
——

ElkArte Forum 1.1.9 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the theme installation process. Attackers can upload a ZIP archive with a PHP file containing system commands, which can then be executed by accessing the uploaded file in the theme directory.