high8.8
CVE-2018-12995
onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen.
Impact
onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Onefilecms | Onefilecms | through 2012-04-14 |