NetSight
high8.1

CVE-2018-17364

OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.

Impact

OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.

Affected products

VendorProductAffected versions
OtcmsOtcms
Version 3.61

Weakness classification

References