CVE-2018-11736

2018-06-0506:29:00

Google

osv.dev

9.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

JSON

An issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote attackers to upload and execute arbitrary PHP code by using the image/jpeg content type for a .htaccess file.

CPENameOperatorVersion
pluckeq4.7.4
pluckeq4.7.6
pluckeq4.7
pluckeq4.7.3
pluckeq4.744
pluckeq4.7.5-noversion
pluckeq4.7.2
pluckeq4.74
pluckeq4.74-dev5
pluckeq4.743