Security Advisory
CVE-2018-20300
9.8
CRITICAL
Vulnerability Description
Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file.
Published Date
December 20, 2018
Official Source
NIST NVD Advisory