Description
Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file.
Unscored
CVE-2018-20300
EUVD-2018-12863GHSA-cwhf-vqf3-q732
Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this…
Published Dec 20, 2018 · Updated Aug 5, 2024 · Assigned by mitre