CVE Catalog
CVE-2017-1000196
CriticalSummary
October CMS version 412 is vulnerable to PHP code execution in the asset manager functionality, potentially leading to site compromise and possibly affecting other applications on the server.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows attackers to gain control over the site and potentially other applications running on the same server.
Recommendation
It is recommended to update October CMS to the latest version to mitigate this vulnerability and conduct a security audit of the server.
Original NVD description (English source)
October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on the server.