CVE-2011-5083

Publication date 19 March 2012

Last updated 24 July 2024

Ubuntu priority

Negligible

Why this priority?

Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory.

Read the notes from the security team

Status

Package Ubuntu Release Status
dotclear 11.10 oneiric Not in release
11.04 natty Not in release
10.10 maverick Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

Notes

jdstrand

dotclear in Debian does not ship the vulnerable swf file