SB2018110917 - Code Injection in phpcms.de phpCMS
Published: November 9, 2018 Updated: August 8, 2020
Security Bulletin ID
SB2018110917
CSH Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Code Injection (CVE-ID: CVE-2018-19127)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cache_template/*.tpl.php file along with a "<?php function " substring.
Remediation
Install update from vendor's website.