Read the docs

Easy-cms

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Easy-cms records in CISA KEV

No Easy-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 24

choose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a G…

CVSS 2.0MEDIUM 4.6 Network Low privileges Interaction — EPSS 0.01244 Published 2006-06-21 No fix listed
Open these records in search →