WS-2015-0042

The uploadtemplate function in Fabric in versions 0.9.0 before 1.13.2 is vulernable. Clean up temp file with sudo uploads if destination path is invalid...

Code injection

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...

CVE-2018-18835

CVE-2018-18835 affects DocCms 2016.5.12, where upload_template() in system/changeskin.php enables remote PHP code execution via a template file. The vulnerability permits an attacker to supply a template that is processed by changeskin.php, allowing arbitrary code execution on the affected system...

CVE-2018-18835

uploadtemplate in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file...