CVE-2018-12995

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen

published June 29, 2018

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01227 · 68.5th percentile
Published
2018-06-29T12:00Z
EPSS history
Timeline
  • 29 JUN 12:00Z
    onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen
    cvelistv5