PT-2017-10822
CVE-2017-1000119
·
Published
2017-10-04
·
Updated
2022-05-13
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
October CMS build 412
Description
The issue allows for PHP code execution in the file upload functionality, which can result in site compromise and potentially affect other applications on the server.
Recommendations
For October CMS build 412, update to a version that fixes the file upload vulnerability to prevent PHP code execution and potential site compromise.
Found an issue in the description? Have something to add? Feel free to write us 👾