VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 18, 2018· Updated Jun 17, 2026

CVE-2018-8766

CVE-2018-8766

Description

joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/admin_vod.php?action=add.

Affected products

2
  • Joyplus/Joyplus CMSinferred2 versions
    = 1.6.0+ 1 more
    • (no CPE)range: = 1.6.0
    • (no CPE)range: =1.6.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.