CVE-2019-9829

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art Edit action

published March 15, 2019

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01998 · 80.6th percentile
Published
2019-03-15T03:00Z
EPSS history
Timeline
  • 15 MAR 03:00Z
    Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art Edit action
    cvelistv5