2 matches found
CVE-2018-17418
Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugins\box\filesmanager\filesmanager.admin.php mishandles the forbiddentypes variable...
7.9AI score0.03069EPSS
SaveExploits1References1
CVE-2018-17418: Unrestricted Upload of File with Dangerous Type
Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugins\box\filesmanager\filesmanager.admin.php mishandles the forbiddentypes variable...
7.2CVSS8.6AI score0.03069EPSS
SaveExploits1References2
20