CVE-2018-18869

2022-10-0316:22:03

mitre

www.cve.org

cve-2018-18869

remote code execution

directory traversal

php

empirecms v7.5

9.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.2%

JSON

EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via …%2F directory traversal in a .php filename in the upload/e/admin/ecmscom.php path parameter.

References

qclover.github.io/2018/10/10/EmpireCMS_V7.5%E7%9A%84%E4%B8%80%E6%AC%A1%E5%AE%A1%E8%AE%A1.html