VYPR
Critical severity9.8NVD Advisory· Published Oct 30, 2018· Updated Jun 17, 2026

CVE-2018-18835

CVE-2018-18835

Description

upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.