CVE-2011-1584: Dotclear

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2.2.3 does not properly restrict pathnames, which allows remote authenticated users to upload and execute arbitrary PHP code via the media_path or media_file parameter. NOTE: some of these details are obtained from third party information.

Affected products

• Dotclear Dotclear: up to and including 2.2.2; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.4 only; version 1.2.5 only; …

Published 2011-06-08. Last modified 2026-06-16.