CVE-2019-9613

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadVideo URI.
References
Link Resource
https://www.seebug.org/vuldb/ssvid-97834 Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:ofcms_project:ofcms:*:*:*:*:*:*:*:*

Information

Published : 2019-03-06 14:29

Updated : 2019-03-07 06:24


NVD link : CVE-2019-9613

Mitre link : CVE-2019-9613


JSON object : View

CWE
CWE-434

Unrestricted Upload of File with Dangerous Type

Advertisement

dedicated server usa

Products Affected

ofcms_project

  • ofcms