critical9.8
CVE-2018-18835
upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.
Impact
upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Doccms | Doccms | Version 2016.5.12 |