CVE-2017-18048
Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is…
published January 23, 2018
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.
What it is
Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.63355 · 99.2th percentile
- Published
- 2018-01-23T06:00Z
EPSS history
Timeline