Skip to content
OpenAdvisories

Package · Packagist

october/cms

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2020-15246

    Local File Inclusion by unauthenticated users

    October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.421 and before version 1.0.469, an attacker can read local files on an October CMS server via a specially crafted request. Issue has b…

    October CMS october october/cms Packagist
  • High 7.2
    CVE-2017-1000119 Public exploit EPSS 61%

    October CMS PHP Code Execution

    October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

    october/cms Packagist