CVE-2018-18835

CVE-2018-18835 affects DocCms 2016.5.12, where upload_template() in system/changeskin.php enables remote PHP code execution via a template file. The vulnerability permits an attacker to supply a template that is processed by changeskin.php, allowing arbitrary code execution on the affected system...