critical9.8
CVE-2018-9847
In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this c…
Impact
In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gxlcms | Gxlcms Qy | Version 1.0.0713 |