CVE-2018-18086

Vulnerability

EmpireCMS v7.5 contains an arbitrary file upload vulnerability in the LoadInMod function within e/class/moddofun.php. This allows authenticated users to upload arbitrary files, including PHP scripts, to the server. [1]

Exploitation

An attacker with a valid login can craft a request to the vulnerable function, uploading a malicious file. No additional privileges or interaction beyond authentication are required. [1]

Impact

Successful exploitation results in arbitrary file upload, enabling remote code execution (RCE) as the web server user. The attacker can then execute arbitrary commands, upload further payloads, or access sensitive data. [1]

Mitigation

As of the published date (2018-10-09), no official patch has been released. Users should restrict access to the administrative interface and monitor for unauthorized uploads. If possible, apply file upload restrictions or use a web application firewall. [1]