CVE-2017-1000119

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

Metrics

CVSS 3.0 7.2/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Oct 5, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10001208.8[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbit CVE-2017-10001219.8The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised CVE-2017-10001225.3The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromi CVE-2017-10001257.5Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.CVE-2017-10001265.5exiv2 0.26 contains a Stack out of bounds read in webp parser CVE-2017-10001275.5Exiv2 0.26 contains a heap buffer overflow in tiff parser CVE-2017-10001285.5Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser CVE-2017-10001297.5Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure CVE-2017-10001316.5Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in to their Mahara acco CVE-2017-10001324.8Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf fi CVE-2017-10001337.5Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing anoth CVE-2017-10001348.1Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose a