CVE-2017-1000119 October CMS PHP Code Execution
Attackers can upload malicious files to execute PHP code, leading to full site compromise and potential server takeover.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-1000119?
CVE-2017-1000119 is a high-severity vulnerability in Octobercms October, published on 4 Oct 2017. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.
Weakness: CWE-434
Which versions are affected by CVE-2017-1000119?
2 open source packages ship an affected version, including october/cms. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
october/cms Packagist | All versions to 1.0.412 | None |
october/cms Packagist | All versions to 1.0.412 | None |
Products include Octobercms October.
How do I fix CVE-2017-1000119?
No fix has been published for CVE-2017-1000119 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-1000119 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-1000119 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in Octobercms October
Sources
Also known as GHSA-q263-j3q9-g964.