GHSA-q263-j3q9-g964

ghsaUSosv

October CMS PHP Code Execution

view advisory published 2022-05-13Licence: CC-BY-4.0

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-1000119US	high7.2	61.3% (99th)	Exploit	2017-10-05
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

references

External citations — patches, advisories, analysis.

http://octobercms.com/support/article/rn-8WEB
http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.htmlWEB
https://github.com/octobercms/octoberPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2017-1000119ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan