Lucene search
GoogleOSV:CVE-2018-14857HistoryAug 06, 2018 - 9:29 p.m.
CVE-2018-14857
2018-08-0621:29:00
Google
osv.dev
9
Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a template file containing PHP code, because file extensions other than .html are permitted.
Related
zdt
zdt
OCS Inventory NG Webconsole Shell Upload Vulnerability
2018-08-07 00:00:00
prion
prion
Unrestricted file upload
2018-08-06 21:29:00
cvelist
cvelist
CVE-2018-14857
2018-08-06 21:00:00
debiancve
debiancve
CVE-2018-14857
2018-08-06 21:29:00
packetstorm
packetstorm
OCS Inventory NG Webconsole Shell Upload
2018-08-06 00:00:00
cve
cve
CVE-2018-14857
2018-08-06 21:29:00
ubuntucve
ubuntucve
CVE-2018-14857
2018-08-06 00:00:00
nvd
nvd
CVE-2018-14857
2018-08-06 21:29:00
openvas
openvas
OCS Inventory NG < 2.5 Multiple Vulnerabilities
2018-08-07 00:00:00