CyberRota Analysis
AI-GeneratedPheditor versions prior to 2.0.5 are vulnerable to an authenticated terminal command whitelist bypass, allowing users with terminal permissions to execute arbitrary shell commands via shell command substitution. This could lead to significant security breaches, as attackers could leverage this flaw to gain control over the web server. Organizations using Pheditor should prioritize updating to version 2.0.5 or later to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pheditor is a single-file editor and file manager written in PHP. Prior to version 2.0.5, there is an authenticated terminal command whitelist bypass. The terminal feature checks whether the submitted command starts with one of the configured TERMINAL_COMMANDS values, then passes the full command string to shell_exec(). Shell command substitution such as $() is not blocked, so an authenticated user with the terminal permission can bypass a restricted command allowlist and execute arbitrary shell commands as the web server user. This issue has been patched in version 2.0.5.