CVE-2018-18426

https://notcve.org/view.php?id=CVE-2018-18426

17 Oct 2018 — s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter. s-cms 3.0 permite que los atacantes remotos ejecuten código PHP arbitrario colocando dicho código en un valor Disallow User-agent manipulado en el parámetro txt en robots.php. • http://www.ttk7.cn/post-93.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •