Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2018-19422

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-73xj-v6gc-g5p5

Subrion CMS RCE Vulnerability `/panel/uploads` in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

gitlab/packagist/intelliants/subrion/CVE-2018-19422

Unrestricted Upload of File with Dangerous Type /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.