Lucene search
+L

5 matches found

NVD
NVD
•added 2018/06/29 12:29 p.m.•24 views

CVE-2018-12995

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...

8.8CVSS8.9AI score0.01227EPSS
SaveExploits1References1
OSV
OSV
•added 2018/06/29 12:29 p.m.•14 views

CVE-2018-12995

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...

8.8CVSS6AI score0.01227EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/06/29 12:00 p.m.•36 views

CVE-2018-12995

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...

8.9AI score0.01227EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/06/29 12:00 a.m.•3 views

PT-2018-11524

Name of the Vulnerable Software and Affected Versions OneFileCMS versions prior to 2012-04-14 Description The issue allows attackers to execute arbitrary PHP code via a .php filename on the Upload screen. Recommendations For versions prior to 2012-04-14, consider restricting access to the Upload...

8.8CVSS0.01227EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/29 12:00 a.m.•10 views

CVE-2018-12995: Improper Control of Generation of Code

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...

8.8CVSS8.2AI score0.01227EPSS
SaveExploits1References2
Rows per page
Query Builder