high7.2Public exploit code
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- October CMS - Upload Protection Bypass Code Execution (Metasploit)2019-09-10 · remote · php · Verified
Impact
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octobercms | October | Version 1.0.412 |
Weakness classification
References
- NVD record
- CVE.org record
- http://octobercms.com/support/article/rn-8
- http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.html
- http://octobercms.com/support/article/rn-8
- http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.html