CVE-2017-1000119

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000119
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000119.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000119
Aliases
Published
2017-10-05T01:29:04.727Z
Modified
2026-07-08T11:34:51.476006Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.

References

Affected packages

Git / github.com/octobercms/october

Affected ranges

Type
GIT
Repo
https://github.com/octobercms/october
Events
Introduced
982bc43348a4cff3f5ce824417c9439e5fb8bb34
Last affected
982bc43348a4cff3f5ce824417c9439e5fb8bb34
Database specific 
{
    "cpe": "cpe:2.3:a:octobercms:october:1.0.412:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.0.412"
        },
        {
            "last_affected": "1.0.412"
        }
    ]
}

Affected versions

1.*
1.0.412
v1.*
v1.0.412

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000119.json"