3 matches found
Code injection
Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file...
PT-2018-15300
Name of the Vulnerable Software and Affected Versions Empire CMS version 7.5 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by injecting code into a memberform.$fid.php file via the ftemp parameter in an "enews=EditMemberForm" action. Recommendations...
CVE-2018-20300: Improper Control of Generation of Code
Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file...