CVE-2018-20300

Published: 2018-12-20T00:29Z

Last Modified: 2024-11-21T04:01Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt