{"id":"CVE-2017-1000119","published":"2017-10-04T01:00:00Z","modified":"2024-08-05T21:53:06Z","title":"October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server.","provenance":"source","from":"CVE.org"},"summary":{"text":"October CMS build 412 contains a flaw in its file upload functionality that allows PHP code execution on the server. An attacker who can reach the upload feature can abuse it to run arbitrary PHP, which could compromise the site and potentially other applications hosted on the same server.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:21:20Z"},"cvss":null,"epss":{"score":0.61347,"percentile":0.99161,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://octobercms.com/support/article/rn-8","tags":["x_refsource_CONFIRM"]},{"url":"http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.html","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Packagist","package":"october/cms","vulnerableRanges":["<=1.0.412"],"patched":[],"from":["GHSA-q263-j3q9-g964"],"provenance":"source"}],"advisories":[{"id":"GHSA-q263-j3q9-g964","url":"https://github.com/advisories/GHSA-q263-j3q9-g964","severity":"HIGH","ecosystem":"Packagist","package":"october/cms","vulnerableRanges":["<=1.0.412"],"patched":[],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-4858","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4858","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":47376,"url":"https://www.exploit-db.com/exploits/47376","title":"October CMS - Upload Protection Bypass Code Execution (Metasploit)","type":"remote","platform":"php","date":"2019-09-10","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2019-09-10"},"metasploit":[{"name":"October CMS Upload Protection Bypass Code Execution","module":"exploit/multi/http/october_upload_bypass_exec","type":"exploit","disclosureDate":"2017-04-25","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/october_upload_bypass_exec.rb"}],"first":{"date":"2017-04-25","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/october_upload_bypass_exec.rb"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/154390/October-CMS-Upload-Protection-Bypass-Code-Execution.html"],"flow":[],"timeline":[{"date":"2017-04-25","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2019-09-10","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/october_upload_bypass_exec.rb","provenance":"source"},{"date":"2017-10-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-1000119","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":24.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.83,"detail":"percentile 0.9916"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 1 NVD exploit link; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}