SuperSalsa20/Doccms-Execute-Code

SuperSalsa20/Doccms-Execute-Code

GitHubGitHub
GitHubgithub.com
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-16192↗
9.8 CRITICAL7.5 HIGH

upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.