Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Phpcms Project Subscribe
Filtered by product Phpcms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-14399 1 Phpcms Project 1 Phpcms 2018-09-17 7.5 HIGH 9.8 CRITICAL
libs\classes\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute arbitrary PHP code via a .txt?.php#.jpg URI in the SRC attribute of an IMG element within info[content] JSON data to the index.php?m=member&c=index&a=register URI.