CVE-2019-9613
06.03.2019, 22:29
An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadVideo URI.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ofcms_project | ofcms | 𝑥 < 1.1.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration