Security Advisory
CVE-2018-17126
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
CScms 4.1 allows remote code execution, as demonstrated by 1);eval($_POST[cmd]);# in Web Name to uploadpluginssysInstall.php.