CVE-2019-16192

Published: 2019-09-09T21:15Z

Last Modified: 2024-11-21T04:30Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt