Description
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.
Unscored
CVE-2019-16192
EUVD-2019-7007GHSA-4rqp-cqfj-7r6v
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code throu…
Published Sep 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre