Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2019-16192
Disclosure Date: September 09, 2019 (last updated November 27, 2024)
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.
0
Attacker Value
Unknown
CVE-2018-18835
Disclosure Date: October 30, 2018 (last updated November 27, 2024)
upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.
0
