CVE-2019-11377

2019-04-2015:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.3%

JSON

wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_get_text_exts function.

CPENameOperatorVersion
wcmseq0.0.6
wcmseq0.3.2
wcmseq0.0.2
wcmseq0.0.8
wcmseq0.1.3
wcmseq0.2.6
wcmseq0.1.7
wcmseq0.1.4
wcmseq0.1.2.1
wcmseq0.1.1

Name	Operator	Version
wcms	eq	0.0.6
wcms	eq	0.3.2
wcms	eq	0.0.2
wcms	eq	0.0.8
wcms	eq	0.1.3
wcms	eq	0.2.6
wcms	eq	0.1.7
wcms	eq	0.1.4
wcms	eq	0.1.2.1
wcms	eq	0.1.1

Rows per page:

1-10 of 331

References

www.iwantacve.cn/index.php/archives/208/

github.com/vedees/wcms/issues/2