2018-06-29 12:00:00
mitre
PUBLISHED
onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen.