Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-9037

Monstra CMS 3.0.4 allows remote code execution via an upload_file request for a .zip file, which is automatically extracted and may contain .php files.