Lucene search
GoogleOSV:CVE-2018-16370HistorySep 03, 2018 - 12:29 a.m.
CVE-2018-16370
2018-09-0300:29:00
Google
osv.dev
2
In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pescms-team | eq | 2.1.1 | |
| pescms-team | eq | 2.1.0 | |
| pescms-team | eq | 2.0.2 | |
| pescms-team | eq | 2.2.1 | |
| pescms-team | eq | 1.0.3 | |
| pescms-team | eq | 2.2.0 | |
| pescms-team | eq | 2.0.1 | |
| pescms-team | eq | 2.0.0 |
References
Related
nvd
nvd
CVE-2018-16370
2018-09-03 00:29:00
cve
cve
CVE-2018-16370
2018-09-03 00:29:00
cvelist
cvelist
CVE-2018-16370
2018-09-03 00:00:00
prion
prion
Code injection
2018-09-03 00:29:00