CVE-2018-12995

Published June 29th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen.

rocktronica/OneFileCMS

A CMS (err, text editor and file manager) all in one file.

GitHub

28