CVE-2018-1999009

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php244 makeFileContents function that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend pat...

PT-2018-15194

Name of the Vulnerable Software and Affected Versions October CMS versions prior to Build 437 Description The issue is related to a Local File Inclusion vulnerability in the makeFileContents function within modules/system/traits/ViewMaker.php. This can lead to sensitive information disclosure and...