In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/pluxml/PluXml/issues/320 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-10-02T12:46:21
Updated: 2024-08-04T14:00:49.066Z
Reserved: 2020-08-13T00:00:00
Link: CVE-2020-18184
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-10-02T13:15:12.223
Modified: 2024-11-21T05:08:28.300
Link: CVE-2020-18184
Redhat
No data.