cbcvebase.

Zeta-Producer Zeta Producer Desktop Cms vulnerabilities

1 known vulnerability affecting zeta-producer/zeta_producer_desktop_cms.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-13981P2CRITICALCVSS 9.8PoCfixed in 14.2.12018-07-16
CVE-2018-13981 [CRITICAL] CWE-434 CVE-2018-13981: The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthen The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files, because the formmailer widget blocks .php files but not .php5 or .phtml files. This is related to /assets/php/formmailer/SendEmail.php and /assets/p
nvd
Zeta-Producer Zeta Producer Desktop Cms vulnerabilities | cvebase