TI-2013-01465 CVE-2013-1668 · GHSA-g8wx-wwr2-j96mThe uploadFile function in upload/index.php in CosCMS before 1.822 allows remote…Priority MEDIUM 47The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file.CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.06977 · Published 2014-05-23 · No fix listed CWE-78