Description. ** DISPUTED ** October CMS through 1.0.428 does not prevent use of .htaccess in themes, which allows remote authenticated users to execute arbitrary PHP code by downloading a theme ZIP archive from /backend/cms/themes, and then uploading and importing a modified archive with ...
from Google Alert - vulnerability http://ift.tt/2jn7zjV
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment