| Package | Affected versions | Patched versions |
|---|---|---|
| publiccms | = 4.0.20180210 |
A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free