Axublog Code Execution Vulnerability

Axublog is a lightweight blogging system based on PHP and MySQL. A security vulnerability exists in Axublog version 1.1.0. A remote attacker can exploit this vulnerability by injecting PHP code into the cmsconfig.php file to execute code...

CVE-2018-10740

Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code contained in the webkeywords parameter into the cmsconfig.php file...