Description
EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory traversal in a .php filename in the upload/e/admin/ecmscom.php path parameter.
Unscored
CVE-2018-18869
EUVD-2018-10580GHSA-4vx5-4pfx-2jm6
EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory traversal in a .php filename in the upload/…
Published Oct 31, 2018 · Updated Sep 17, 2024 · Assigned by mitre