October CMS Local File Inclusion Vulnerability

October CMS is an open source, self-hosted content management system CMS built on the Laravel PHP framework developed by Canadian software developer Alexey Bobkov and Australian software developer Samuel Georges. A local file inclusion vulnerability exists in the modules/system/traits/ViewMaker.p...

CVE-2018-1999009

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php244 makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...

CVE-2018-1999009: Exposure of Sensitive Information to an Unauthorized Actor

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php244 makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...

PT-2018-15194

Name of the Vulnerable Software and Affected Versions October CMS versions prior to Build 437 Description The issue is related to a Local File Inclusion vulnerability in the makeFileContents function within modules/system/traits/ViewMaker.php. This can lead to sensitive information disclosure and...