CVE-2018-19422

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these

published November 21, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.

CVSS

—

EPSS

64%

Percentile

99.2

In the wild

Unconfirmed

What it is

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.64261 · 99.2th percentile
Published: 2018-11-21T00:00Z

EPSS history

Timeline

21 NOV 00:00Z
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these
cvelistv5