Researchers
Back
Sunu11
#19447
of 60,596
16
Total CVSS
Vulnerabilities
·
2
High
2
PT-2018-14736
2018-11-05
7.2
CVE-2018-18942
Baser
Basercms
The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the `admin/theme configs/form` data, specifically through the `ThemeConfig][logo` parameter in the `libBaserModelThemeConfig.php` file.
PT-2018-18799
2018-04-10
8.8
CVE-2018-9037
Monstra
Monstra Cms
The issue allows remote code execution via an upload file request for a .zip file. This .zip file is automatically extracted and may contain .php files, leading to potential code execution.