Critical severity9.8OSV Advisory· Published Sep 2, 2018· Updated Jun 17, 2026

CVE-2018-16352

Description

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Alterebro/WeaselcmsOSV2 versions
v0.1, v0.2, v0.3.0, …+ 1 more
- (no CPE)range: v0.1, v0.2, v0.3.0, …
- (no CPE)range: =0.3.6
Weaselcms Project/Weaselcms
cpe:2.3:a:weaselcms_project:weaselcms:0.3.6:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/alterebro/WeaselCMS/issues/8nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000