| Package | Affected versions | Patched versions |
|---|---|---|
| nc-cms | ≤ 2017-03-10 |
nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=file_manager_upload URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free