Kinson Chan Charray : Security Vulnerabilities, CVEs,
Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the ccms_library_path parameter to (1) markdown.php and (2) gallery.php in decoder/.
Max CVSS
7.5
EPSS Score
10.53%
Published
2007-11-30
Updated
2017-09-29
1 vulnerabilities found