Security Advisory

CVE-2018-18934

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-11-05 08:00:00

Last updated 2024-08-05 11:23:08

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code (that is extracted and can be executed). This can also be exploited via CSRF.

← Browse all CVEs View on cve.org ↗