CVE-2019-9612

2019-03-06T22:29:00
ID CVE-2019-9612
Type cve
Reporter cve@mitre.org
Modified 2019-03-07T14:46:00

Description

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/upload URI.