CVE-2018-12994
onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen.
Published: 2018-06-29 · CVSS: Unscored
onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7