CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2018/10/30 6:29 a.m.•36 views

CVE-2018-18835

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

9.8CVSS9.7AI score0.01577EPSS

SaveExploits1References1

CVE•added 2018/10/30 6:00 a.m.•52 views

CVE-2018-18835

CVE-2018-18835 affects DocCms 2016.5.12, where upload_template() in system/changeskin.php enables remote PHP code execution via a template file. The vulnerability permits an attacker to supply a template that is processed by changeskin.php, allowing arbitrary code execution on the affected system...

9.8CVSS9.6AI score0.01577EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2018/10/30 6:00 a.m.•45 views

CVE-2018-18835

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

9.7AI score0.01577EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2018/10/30 12:00 a.m.•5 views

CVE-2018-18835: Improper Control of Generation of Code

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

9.8CVSS8.6AI score0.01577EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by