Lucene search
PRIOn knowledge basePRION:CVE-2018-17418HistoryMar 07, 2019 - 11:29 p.m.
Code injection
2019-03-0723:29:00
PRIOn knowledge base
www.prio-n.com
2
Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugins\box\filesmanager\filesmanager.admin.php mishandles the forbidden_types variable.
Related
osv
osv
CVE-2018-17418
2019-03-07 23:29:00
nvd
nvd
CVE-2018-17418
2019-03-07 23:29:00
cve
cve
CVE-2018-17418
2019-03-07 23:29:00
cvelist
cvelist
CVE-2018-17418
2019-03-07 22:00:00
openvas
openvas
Monstra CMS <= 3.0.4 Multiple Vulnerabilities
2018-05-29 00:00:00