Lucene search
GoogleOSV:GHSA-R342-VJC4-WRMJHistoryMay 13, 2022 - 1:20 a.m.
Craft CMS PHP Code Injection Vulnerability
2022-05-1301:20:14
Google
osv.dev
4
craft cms
php code injection
remote attackers
Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the “Assets->Upload files” screen and then the “Replace it” option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension.
Related
github
github
Craft CMS PHP Code Injection Vulnerability
2022-05-13 01:20:14
osv
osv
CVE-2018-3814
2018-01-01 20:29:00
prion
prion
Code injection
2018-01-01 20:29:00
nvd
nvd
CVE-2018-3814
2018-01-01 20:29:00
cvelist
cvelist
CVE-2018-3814
2018-01-01 20:00:00
cve
cve
CVE-2018-3814
2018-01-01 20:29:00