CVE-2017-1000196: Code Injection
Published Nov 17, 2017
·Updated
October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on the server.
Affected Software
1 affected component
October CMS Debugbar<=1.0.412
Remediation
Event History
Nov 17, 2017
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is CVE-2017-1000196?
CVE-2017-1000196 is a vulnerability in October CMS build 412 that allows for PHP code execution in the asset manager functionality, potentially leading to site compromise and other applications on the server being affected.
2
How severe is CVE-2017-1000196?
CVE-2017-1000196 has a severity rating of 9.8 (Critical).
3
What is the affected software version of CVE-2017-1000196?
The affected software version of CVE-2017-1000196 is October CMS build 412.
4
How can CVE-2017-1000196 be fixed?
To fix CVE-2017-1000196, it is recommended to update October CMS to a version that includes the fix, such as v1.0.413 or later.
5
What is the CWE ID of CVE-2017-1000196?
The CWE ID of CVE-2017-1000196 is CWE-94 (Improper Control of Generation of Code)