Security Advisory

CVE-2018-12914

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-27 18:00:00

Last updated 2024-08-05 08:45:02

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI.

← Browse all CVEs View on cve.org ↗