Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-14334
HistoryJul 17, 2018 - 2:29 a.m.

Design/Logic Flaw

2018-07-1702:29:00
PRIOn knowledge base
www.prio-n.com
2

9.6 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.1%

manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766.

CPENameOperatorVersion
joyplus-cmseq1.6.0

9.6 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.1%

Related for PRION:CVE-2018-14334