CVE Catalog
CVE-2023-36212
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk23.73%
98th percentile - higher than 98% of all known CVEs
Summary
File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function.
Risk Assessment
An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise.
Recommendation
It is recommended to update Total CMS to the latest version to mitigate this vulnerability and implement additional security measures regarding file uploads.
Original NVD description (English source)
File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function.