CVE-2018-18835

CVE-2018-18835 affects DocCms 2016.5.12, where upload_template() in system/changeskin.php enables remote PHP code execution via a template file. The vulnerability permits an attacker to supply a template that is processed by changeskin.php, allowing arbitrary code execution on the affected system...

PT-2018-14683

Name of the Vulnerable Software and Affected Versions DocCms version 2016.5.12 Description The issue allows remote attackers to execute arbitrary PHP code via a template file. This is possible due to a problem in the upload template function located in the system/changeskin.php file...

CVE-2018-18835: Improper Control of Generation of Code

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...