October CMS

octobercms in a CMS platform based on the Laravel PHP Framework.

October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework.

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

A Cross-Site Scripting (XSS) vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field.

An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file.

October 3.6.30 allows an authenticated admin account to upload a PDF file containing malicious JavaScript into the target system.

An issue was discovered in October through build 471.

October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on the server.

Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework.

October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.

The October CMS debugbar plugin before version 3.1.0 contains a feature where it will log all requests (and all information pertaining to each request including session data) whenever it is enabled.

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.

October CMS is a self-hosted content management system (CMS) platform based on the Laravel PHP Framework.

Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for postback handling, allowing an attacker to successfully take over the victim's account.

October is a Content Management System (CMS) and web platform to assist with development workflow.

October CMS through 1.0.428 does not prevent use of .htaccess in themes, which allows remote authenticated users to execute arbitrary PHP code by downloading a theme ZIP archive from /backend/cms/themes, and then uploadi…

October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework.

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote c…

October is a self-hosted Content Management System (CMS) platform based on the Laravel PHP Framework.

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.

October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server.

Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3

October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework.

octobercms in a CMS platform based on the Laravel PHP Framework.