CVE-2018-12994

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen

published June 29, 2018

CVSS
—
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01227 · 68.6th percentile
Published
2018-06-29T12:00Z
EPSS history
Timeline
  • 29 JUN 12:00Z
    onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen
    cvelistv5