EDB-47376

functional

October CMS - Upload Protection Bypass Code Execution (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2019-09-10catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-1000119US	high7.2	61.3% (99th)	Exploit	2017-10-05
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.