CVE-2018-7046

Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .NET code evaluation context via C# code in a "Pages -> Edit -> Template -> Edit template properties -> Layout" box. NOTE: the vendor has responded that there is intended functionality for authorized users to edit and update ascx code layout

• CWE-78

• http://www.securityfocus.com/archive/1/541790/100/0/threadedExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/541790/100/0/threadedExploit, Third Party Advisory, VDB Entry

Published

Feb 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7031Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-7032webcheckout in myrepos through 1.20171231 does not sanitize …
• CVE-2018-7033SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 all…
• CVE-2018-7034TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733…
• CVE-2018-7035Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 …
• CVE-2018-7039CCN-lite 2.0.0 Beta allows remote attackers to cause a denia…
• CVE-2018-7047An issue was discovered in the MBeans Server in Wowza Stream…
• CVE-2018-7048An issue was discovered in Wowza Streaming Engine before 4.7…
• CVE-2018-7049An issue was discovered in Wowza Streaming Engine before 4.7…
• CVE-2018-7050An issue was discovered in Irssi before 1.0.7 and 1.1.x befo…
• CVE-2018-7051An issue was discovered in Irssi before 1.0.7 and 1.1.x befo…
• CVE-2018-7052An issue was discovered in Irssi before 1.0.7 and 1.1.x befo…