CyberRota Analysis
AI-GeneratedWindu CMS is vulnerable due to its failure to validate the types of uploaded files, allowing authenticated attackers to upload arbitrary files, including PHP scripts. This flaw can lead to Remote Code Execution, posing a significant risk to the integrity and security of the affected systems. Organizations using Windu CMS, particularly those on version 4.1 or potentially earlier versions, should prioritize remediation efforts to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.