CVE-2018-16388

e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content…

published September 12, 2018

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02187 · 82.3th percentile
Published
2018-09-12T16:00Z
EPSS history
Timeline
  • 12 SEP 16:00Z
    e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content…
    cvelistv5