Approved changes feed: RSS · Atom

cpe:2.3:a:doccms:doccms:2016.5.17:*:*:*:*:*:*:*

part: a version: 2016.5.17 update: *

VendorDoccms (038e68af-24e7-528f-85a2-f88fbb5f67ac)
ProductDoccms (62dfad7e-4d9d-5beb-975c-ee7f19e07131)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/apulll/doccms purl2cpe 2026-06-01 10:15:46.753927
pkg:github/wangle201210/doccms purl2cpe 2026-06-01 10:15:46.753928

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-16192 vulnerable 2026-06-08 05:13:07.876817 Details available
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.
Published: 2019-09-09T20:39:05.000Z
Updated: 2024-08-05T01:10:41.562Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.