GitHub Advisoryadvisory · Packagist

GHSA-q263-j3q9-g964 October CMS PHP Code Execution

HIGH Published 2022-05-13 Modified 2023-07-31 Official page ↗
Aliases
CVE-2017-1000119
Ecosystem
Packagist
Packages
october/cms
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-434
Reviewed
2023-07-31

Affected packages

• Packagist october/cms: <= 1.0.412 (no fix yet)

Description

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

Related

Alias · CVE (1)

  • CVE-2017-1000119 October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other… vulnerability

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References