CVE-2024-31012: Malicious File Upload
Published Apr 3, 2024
·Updated
An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file.
Affected Software
2 affected components
SEMCMS SEMCMS
Sem-cms Semcms=4.8
Event History
Apr 3, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-31012?
CVE-2024-31012 has a critical severity rating due to its potential to allow remote code execution and privilege escalation.
2
How do I fix CVE-2024-31012?
To mitigate CVE-2024-31012, you should update SEMCMS to the latest version that addresses this vulnerability.
3
What types of attacks can CVE-2024-31012 facilitate?
CVE-2024-31012 can facilitate arbitrary code execution, privilege escalation, and unauthorized access to sensitive information.
4
Who is affected by CVE-2024-31012?
Users of SEMCMS version 4.8 are affected by CVE-2024-31012.
5
Is my data at risk with CVE-2024-31012?
Yes, CVE-2024-31012 puts sensitive data at risk due to its capability for arbitrary code execution.