Skip to content
OpenAdvisories

Vendor

InstantCMS

1 known vulnerabilities.

Products

InstantCMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2013-10051 Public exploit

    InstantCMS <= 1.6 Remote PHP Code Execution

    A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and execut…

    InstantCMS InstantCMS