CVE-2018-9037

Monstra CMS 3.0.4 allows remote code execution via an upload_file request for a .zip file, which is automatically extracted and may contain .php files.

Affected products

Monstra Cms

Monstra

= 3.0.4

Fix

Available

CVSS 3.0

8.8 HIGH

EPSS

2.9% (86th percentile)

Weakness

CWE-434

NVD status

Modified

Published

2018-04-10