CVE-2026-54416 - Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php ('.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar'), checked against the last 4-5 characters of the filename. - 漏洞详情

漏洞编号：CVE-2026-54416

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-54416

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-434

发布/更新时间：2026-08-05 / 2026-08-28

漏洞描述

Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php ('.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar'), checked against the last 4-5 characters of the filename.

漏洞描述

相关链接

相关漏洞