Description
In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.
Unscored
CVE-2018-9847
EUVD-2018-21441GHSA-cv8p-r9gw-9x34
In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP co…
Published Apr 7, 2018 · Updated Aug 5, 2024 · Assigned by mitre