CVE-2018-19520

An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace 'e' calls, allowing users to execute arbitrary code by leveraging access to admin template management.

• CWE-94

• https://blog.whiterabbitxyj.com/cve/SDCMS_1.6_code_execution.docExploit, Third Party Advisory
• https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/SDCMS_1.6_code_execution.docExploit, Third Party Advisory
• https://blog.whiterabbitxyj.com/cve/SDCMS_1.6_code_execution.docExploit, Third Party Advisory
• https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/SDCMS_1.6_code_execution.docExploit, Third Party Advisory

Published

Nov 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19515In Webgalamb through 7.0, system/ajax.php functionality is s…
• CVE-2018-19516messagepartthemes/default/defaultrenderer.cpp in messagelib …5.3
• CVE-2018-19517An issue was discovered in sysstat 12.1.1. The remap_struct …
• CVE-2018-19518University of Washington IMAP Toolkit 2007f on UNIX, as used…7.5
• CVE-2018-19519In tcpdump 4.9.2, a stack-based buffer over-read exists in t…
• CVE-2018-1952IBM Jazz Foundation (IBM Rational Engineering Lifecycle Mana…5.4
• CVE-2018-19522DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0…5.5
• CVE-2018-19523DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0…
• CVE-2018-19524An issue was discovered on Shenzhen Skyworth DT741 Converged…
• CVE-2018-19525An issue was discovered on Systrome ISG-600C, ISG-600H, and …
• CVE-2018-19527i4 assistant 7.85 allows XSS via a crafted machine name fiel…
• CVE-2018-19528TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers t…