cve/2017/CVE-2017-1000119.md

CVE-2017-1000119

Description

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

POC

Reference

• http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.html

Github

• https://github.com/cocomelonc/vulnexipy