Page 7 of 31 results (0.003 seconds)
CVSS: 7.2EPSS: 73%CPEs: 1EXPL: 1
CVE-2017-1000119 – October CMS - Upload Protection Bypass Code Execution
https://notcve.org/view.php?id=CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server. La build 412 de October CMS es vulnerable a la ejecución de código PHP en la funcionalidad de subida de archivos, lo que resulta en el compromiso del sitio y, probablemente, otras aplicaciones en el servidor. • https://www.exploit-db.com/exploits/47376 http://octobercms.com/support/article/rn-8 http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.html https://bitflipper.eu/finding/2017/04/october-cms-v10412-several-issues.html • CWE-434: Unrestricted Upload of File with Dangerous Type •