CVE-2018-10740

EUVD-2018-2810
Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmsconfig.php file.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
Affected Products (NVD)
VendorProductVersion
axublogaxublog
1.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/axublog/axublog/issues/1
https://github.com/axublog/axublog/issues/1