Unsecure File Upload for Elcom CMS 7.4.10 Community Manager

Elcom CMS-Community Manager Insecure File Upload Vulnerability-Security
Advisory SOS-12-008
 
Affected Product Elcom CMS-Community Manager
Development language ASP. NET
Affected version. Elcom Community Manager version 7.4.10 and
Remote with authentication
Resolution status 7.5 and updated version resolved (not verified
SOS)
Technical analysis.
The https://www.2cto.com UploadStyleSheet. aspx script does not validate the file
Type passed in the parameter "myfile0" on the server side allowing
Uploading and execution of ASPX files. An attacker can upload an ASPX web
Shell and execute commands with web server user privileges.
 
Port scanning ).
A shell uploaded using the vulnerable
(Https://www.2cto.com/UploadStyleSheet. aspx) script can be accessed at
Following location: https: // [server]/UserUploadedStyles/shell. aspx
 
Solution
Upgrade