Skip to content
OpenAdvisories

Package · Packagist

october/cms

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2020-5295 Public exploit

    Local File read vulnerability in OctoberCMS

    In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the…

    October CMS october october/cms Packagist
  • High 7.2
    CVE-2017-1000119 Public exploit EPSS 61%

    October CMS PHP Code Execution

    October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

    october/cms Packagist