Unrated severityNVD Advisory· Published Mar 6, 2019· Updated Sep 16, 2024
CVE-2019-9612
CVE-2019-9612
Description
An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/upload URI.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.seebug.org/vuldb/ssvid-97835mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.