Burgereditor
Monthly
Authenticated remote code execution is possible in BurgerEditor versions 3.2.0-3.4.0 (and 2.28.0-2.30.0 per EUVD data) via unrestricted file upload, allowing a logged-in attacker to upload arbitrary PHP files and execute server-side code. The vulnerability stems from insufficient validation of uploaded file types (CWE-434), enabling placement of attacker-controlled executables in a web-accessible location. No public exploit code or active exploitation has been identified at time of analysis, though the attack is straightforward once authentication is obtained.
Authorization bypass in BurgerEditor 3.0.0 through 3.4.0 allows authenticated low-privileged users to alter page content outside their permitted scope by manipulating user-controlled key parameters. Rooted in CWE-639 (Authorization Bypass Through User-Controlled Key), the flaw permits any logged-in user to substitute a legitimate resource identifier with one belonging to another user or content area, bypassing ownership checks server-side. No public exploit code or active exploitation has been identified; the CVSS 4.3 Medium rating reflects the authentication prerequisite and limited integrity-only impact.
Authenticated remote code execution is possible in BurgerEditor versions 3.2.0-3.4.0 (and 2.28.0-2.30.0 per EUVD data) via unrestricted file upload, allowing a logged-in attacker to upload arbitrary PHP files and execute server-side code. The vulnerability stems from insufficient validation of uploaded file types (CWE-434), enabling placement of attacker-controlled executables in a web-accessible location. No public exploit code or active exploitation has been identified at time of analysis, though the attack is straightforward once authentication is obtained.
Authorization bypass in BurgerEditor 3.0.0 through 3.4.0 allows authenticated low-privileged users to alter page content outside their permitted scope by manipulating user-controlled key parameters. Rooted in CWE-639 (Authorization Bypass Through User-Controlled Key), the flaw permits any logged-in user to substitute a legitimate resource identifier with one belonging to another user or content area, bypassing ownership checks server-side. No public exploit code or active exploitation has been identified; the CVSS 4.3 Medium rating reflects the authentication prerequisite and limited integrity-only impact.