CVE-2018-20159

i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated user with the administrator role to upload arbitrary files to the main website directory. Exploitation involves uploading a ".php" file within a ".zip" file because a ZIP archive is accepted by /admin/?req=modules&action=add as a plugin, and extracted to the main directory. In order for the ".zip" file to be accepted, it must also contain a package.json file.

• CWE-20

• https://pentest.com.tr/exploits/i-doit-CMDB-1-11-2-Remote-Code-Execution.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45957Exploit, Third Party Advisory, VDB Entry
• https://pentest.com.tr/exploits/i-doit-CMDB-1-11-2-Remote-Code-Execution.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45957Exploit, Third Party Advisory, VDB Entry

Published

Dec 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20152In WordPress before 4.9.9 and 5.x before 5.0.1, authors coul…
• CVE-2018-20153In WordPress before 4.9.9 and 5.x before 5.0.1, contributors…
• CVE-2018-20154The WP Maintenance Mode plugin before 2.0.7 for WordPress al…
• CVE-2018-20155The WP Maintenance Mode plugin before 2.0.7 for WordPress al…
• CVE-2018-20156The WP Maintenance Mode plugin before 2.0.7 for WordPress al…
• CVE-2018-20157The data import functionality in OpenRefine through 3.1 allo…
• CVE-2018-20160ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbr…
• CVE-2018-20161A design flaw in the BlinkForHome (aka Blink For Home) Sync …
• CVE-2018-20162Digi TransPort LR54 4.4.0.26 and possible earlier devices ha…
• CVE-2018-20164An issue was discovered in regex.yaml (aka regexes.yaml) in …
• CVE-2018-20165Cross-site scripting (XSS) vulnerability in OpenText Portal …
• CVE-2018-20166A file-upload vulnerability exists in Rukovoditel 2.3.1. ind…