Description
An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.
Unscored
CVE-2018-17036
EUVD-2018-8819GHSA-g4cv-96p3-5rqp
An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/i…
Published Sep 14, 2018 · Updated Aug 5, 2024 · Assigned by mitre