Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Earcms Subscribe
Filtered by product Ear Music
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-11756 1 Earcms 1 Ear Music 2017-08-04 6.0 MEDIUM 7.0 HIGH
In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to include .php in addition to .mp3 and .m4a in admin.php?iframe=config_upload, and then using user.php/music/add/ to upload the code.