CVE-2018-18869 | BDVDB-2026-109014 Detail

Description#

EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory traversal in a .php filename in the upload/e/admin/ecmscom.php path parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://qclover.github.io/2018/10/10/EmpireCMS_V7.5%E7%9A%84%E4%B8%80%E6%AC%A1%E5%AE%A1%E8%AE%A1.html

Exploit#

No public exploit known

History#

Version 12018-10-31Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.