Lucene search

K
osvGoogleOSV:GHSA-5CMG-8M8P-WHMJ
HistoryMay 17, 2022 - 12:36 a.m.

GeniXCMS arbitrary PHP code execution

2022-05-1700:36:05
Google
osv.dev
2

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.

CPENameOperatorVersion
genix/cmseq1.1.4

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

Related for OSV:GHSA-5CMG-8M8P-WHMJ