Lucene search
MitreCVELIST:CVE-2019-17370HistoryOct 09, 2019 - 11:04 a.m.
CVE-2019-17370
2019-10-0911:04:25
mitre
www.cve.org
0.001 Low
EPSS
Percentile
48.4%
OTCMS v3.85 allows arbitrary PHP Code Execution because admin/sysCheckFile_deal.php blocks “into outfile” in a SELECT statement, but does not block the “into/**/outfile” manipulation. Therefore, the attacker can create a .php file.
Related
nvd
nvd
CVE-2019-17370
2019-10-09 12:15:10
cve
cve
CVE-2019-17370
2019-10-09 12:15:10
prion
prion
Code injection
2019-10-09 12:15:00