CVE-2018-17036
Last modified
CVE-2018-17036 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.. EPSS estimates a 1.66% chance of exploitation in the next 30 days.
Description
An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ucms Project | Ucms | 1.4.6 |
| Ucms Project | Ucms | 1.6 |
References
- https://github.com/blackstar24/UCMS/blob/master/phpinfo.mdExploit, Third Party Advisory
- https://github.com/blackstar24/UCMS/blob/master/phpinfo.mdExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-17036?
How severe is CVE-2018-17036?
How do I fix CVE-2018-17036?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-17025admin/index.php in Monstra CMS 3.0.4 allows XSS via the page…
- CVE-2018-17026admin/index.php in Monstra CMS 3.0.4 allows XSS via the page…
- CVE-2018-17030BigTree CMS 4.2.23 allows remote authenticated users, if pos…
- CVE-2018-17031In Gogs 0.11.53, an attacker can use a crafted .eml file to …
- CVE-2018-17034UCMS 1.4.6 has XSS via the install/index.php mysql_dbname pa…
- CVE-2018-17035UCMS 1.4.6 has SQL injection during installation via the ins…
- CVE-2018-17037user/editpost.php in UCMS 1.4.6 mishandles levels, which all…
- CVE-2018-17039MiniCMS 1.10, when Internet Explorer is used, allows XSS via…
- CVE-2018-1704IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spect…6.8
- CVE-2018-17042An issue has been found in dbf2txt through 2012-07-19. It is…
- CVE-2018-17043An issue has been found in doc2txt through 2014-03-19. It is…
- CVE-2018-17044In YzmCMS 5.1, stored XSS exists via the admin/system_manage…
Are you affected by CVE-2018-17036?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST