Critical severity9.8NVD Advisory· Published Dec 20, 2018· Updated Jun 17, 2026
CVE-2018-20300
CVE-2018-20300
Description
Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file.
Affected products
1- Range: =7.5
Patches
Vulnerability mechanics
References
1- p0desta.com/2018/12/19/empirecms%E6%9C%80%E6%96%B0%E7%89%88%E5%90%8E%E5%8F%B0%E5%A4%9A%E5%A4%84getshell/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.