CVE-2018-14911

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by...

CVE-2018-14911

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by...

Unrestricted file upload

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by...

CVE-2018-14911

A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index/group/upload.html to gain server control by...

CVE-2018-14911

UKCMS ≤1.1.7 file upload flaw enables an attacker with admin access to bypass PHP upload restrictions by adding php,php to the upload_file_ext setting and uploading a malicious script via the admin.php/admin/configset/index/group/upload.html page. The root cause is inadequate filtering of the upl...

File upload vulnerability in UKcms v1.1.7 and previous versions

UKcms is a simple, flexible and open source web content management system based on PHP7 and mysql technology. UKcms v1.1.7 and previous versions exist file upload vulnerability. The vulnerability is due to the system does not strictly filter the file upload type. Attackers can use the vulnerabili...

File Upload Vulnerability in UKCMS v1.1.0

UKcms is a simple, flexible and open source web content management system based on PHP7 and mysql technology. UKCMS v1.1.0 version exists file upload vulnerability, the vulnerability is due to the system does not strictly filter the file upload type. Attackers can use this vulnerability to upload...