CVE-2014-3782

CVE-2014-3782 describes multiple incomplete blacklist vulnerabilities in the Media Manager of Dotclear versions prior to 2.6.3. Authenticated attackers could exploit this flaw by uploading files with double extensions or specific PHP file extensions (e.g., .php5, .phtml), leading to arbitrary PHP code execution. The vulnerability has a CVSS score of 6.0, indicating a medium severity, and requires network access and medium attack complexity, but only authenticated access. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.