CVE Catalog
CVE-2017-1000194
CriticalSummary
October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality, potentially leading to site compromise and affecting other applications on the server.
Risk Assessment
Compromise of the site may lead to data loss and security breaches of other applications running on the same server.
Recommendation
It is recommended to update to the latest version of October CMS and implement restrictions on file uploads to minimize risk.
Original NVD description (English source)
October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.