critical9.8
CVE-2018-10740
Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmsconfig.php file.
Impact
Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmsconfig.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axublog | Axublog | Version 1.1.0 |