CVE-2014-3782

no score yetEPSS 1.2%

dotclear dotclear: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear before 2.6.3 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) double extension or (2) .php5, (3) .phtml, or some other PHP file extension.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
Published: 2014-06-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dotclear:dotclear

References

http://dotclear.org/blog/post/2014/05/16/Dotclear-2.6.3
http://karmainsecurity.com/KIS-2014-06
http://seclists.org/fulldisclosure/2014/May/108
http://seclists.org/fulldisclosure/2014/May/116
http://seclists.org/fulldisclosure/2014/May/122

Check your stack JSON