Export limit exceeded: 21745 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-16192

upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Doccms
Products
Doccms
CVE-2018-18835

upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Doccms
Products
Doccms