CVE-2018-13038

2018-07-0118:00:00

mitre

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.006

Percentile

78.1%

JSON

OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. This vulnerability leads to uploading arbitrary PHP code via a .php filename with the application/pdf Content-Type.

References

github.com/OpenSID/OpenSID/issues/1177