UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.

Published Dec 30, 2018 · Updated Sep 16, 2024 · Assigned by mitre