Security Advisory

CVE-2018-18869

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-31 06:00:00

Last updated 2024-09-17 00:40:49

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory traversal in a .php filename in the upload/e/admin/ecmscom.php path parameter.

← Browse all CVEs View on cve.org ↗