Executive brief
October CMS PHP Code Execution
Affected products
- Packagist october/cms
Junglewise Threat Intelligence
CVE-2017-1000119: October CMS PHP Code Execution
CVE-2017-1000119 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: october/cms (Packagist). Vendors: Packagist.
Related threats
- Withdrawn Advisory: October Cross-site Scripting vulnerability
- Bypass of fix for , Twig sandbox escape
- Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled.
- Local File Inclusion by unauthenticated users
- Upload whitelisted files to any directory in OctoberCMS