CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Prion•added 2018/12/20 12:29 a.m.•34 views

Code injection

Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file...

7.5CVSS9.7AI score0.01577EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/12/20 12:00 a.m.•6 views

CVE-2018-20300: Improper Control of Generation of Code

Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file...

9.8CVSS6.4AI score0.01577EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by