Beveiligingsadvies

CVE-2017-18048

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-01-23 06:00:00
Laatst bijgewerkt 2024-08-05 21:06:50
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.