CVE-2018-17036

Published: 2018-09-14T07:29Z

Last Modified: 2024-11-21T03:53Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt