CVE-2019-16192

uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...

Code injection

uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...

CVE-2019-16192

uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...

CVE-2019-16192

CVE-2019-16192 affects DocCms 2016.5.17. The vulnerability is in upload_model() of /admini/controllers/system/managemodel.php, where a ZIP containing a PHP file can lead to remote code execution. Exploitation would allow an attacker to run arbitrary PHP on the server, with attacks described as ne...