CVE-2017-1000119: Malicious File Upload
Published Oct 4, 2017
·Updated
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.
Affected Software
2 affected components
composer/october/cms<=1.0.412
October CMS Debugbar=1.0.412
Event History
Oct 4, 2017
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
May 13, 2022
Advisory Published
01:24 AM
Frequently Asked Questions
1
What is the severity of CVE-2017-1000119?
CVE-2017-1000119 is classified as a critical vulnerability due to its potential for PHP code execution and site compromise.
2
How do I fix CVE-2017-1000119?
To fix CVE-2017-1000119, upgrade October CMS to a version higher than 1.0.412.
3
What are the potential consequences of exploiting CVE-2017-1000119?
Exploiting CVE-2017-1000119 could lead to complete site compromise and potential impact on other applications hosted on the server.
4
Is CVE-2017-1000119 related to file uploads in October CMS?
Yes, CVE-2017-1000119 specifically targets the file upload functionality in October CMS.
5
What version of October CMS is affected by CVE-2017-1000119?
CVE-2017-1000119 affects October CMS version 1.0.412 or earlier.