Vulnerabilities > Nconsulting > NC CMS > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-10-31 CVE-2018-18874 Unrestricted Upload of File with Dangerous Type vulnerability in Nconsulting Nc-Cms
nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=file_manager_upload URI.
network
low complexity
nconsulting CWE-434
critical
 9.8
9.8