CoreCVE
Back

CRITICAL

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used

Published Sep 2, 2018

Description

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 2, 2018
Updated Aug 5, 2024
Reserved Sep 2, 2018
Link CVE-2018-16352
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-16352
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-16352