Lucene search
GoogleOSV:CVE-2018-3814HistoryJan 01, 2018 - 8:29 p.m.
CVE-2018-3814
2018-01-0120:29:00
Google
osv.dev
3
Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the “Assets->Upload files” screen and then the “Replace it” option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension.
Related
nvd
nvd
CVE-2018-3814
2018-01-01 20:29:00
github
github
Craft CMS PHP Code Injection Vulnerability
2022-05-13 01:20:14
prion
prion
Code injection
2018-01-01 20:29:00
osv
osv
Craft CMS PHP Code Injection Vulnerability
2022-05-13 01:20:14
cvelist
cvelist
CVE-2018-3814
2018-01-01 20:00:00
cve
cve
CVE-2018-3814
2018-01-01 20:29:00