exploit/multi/http/october_upload_bypass_exec

weaponized

October CMS Upload Protection Bypass Code Execution

view exploit source metasploittype exploitpublished 2017-04-25catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-1000119US	high7.2	61.3% (99th)	Exploit	2017-10-05
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.