CVE-2019-16192
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonst…
Published: 2019-09-09 · CVSS: Unscored
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7