CVE-2019-16192 | BDVDB-2026-122421 Detail

Description#

upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/SuperSalsa20/Doccms-Execute-Code/blob/master/README.md

Exploit#

No public exploit known

History#

Version 12019-09-09Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.