CVE-2018-12491: Malicious File Upload
Published Jun 15, 2018
·Updated
PHPOK 4.9.032 has an arbitrary file upload vulnerability in the importf function in framework/admin/moduleccontrol.php, as demonstrated by uploading a .php file within a .php.zip archive, a similar issue to CVE-2018-8944.
Affected Software
1 affected component
PhpOK PhpOK=4.9.032
Event History
Jun 15, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-12491?
CVE-2018-12491 is considered a high severity vulnerability due to its impact on security through arbitrary file uploads.
2
How do I fix CVE-2018-12491?
To mitigate CVE-2018-12491, update PhpOK to version 4.9.033 or later.
3
What type of vulnerability is CVE-2018-12491?
CVE-2018-12491 is an arbitrary file upload vulnerability that allows attackers to upload malicious files.
4
What software is affected by CVE-2018-12491?
CVE-2018-12491 affects PhpOK version 4.9.032 specifically.
5
Can CVE-2018-12491 be exploited remotely?
Yes, CVE-2018-12491 can be exploited remotely, allowing attackers to upload malicious files to the server.