Security Advisory

CVE-2018-1999009

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-23 15:00:00

Last updated 2024-09-17 00:06:26

Assigner mitre

State PUBLISHED

Description

October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be exploitable remotely if the /backend path is accessible. This vulnerability appears to have been fixed in Build 437.

← Browse all CVEs View on cve.org ↗