{"cvss":0.0,"datePublished":"2019-04-04T00:00:00Z","dateUpdated":"2019-04-04T00:00:00Z","description":"A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cache_template/*.tpl.php file along with a \"<?php function \" substring.","dueDate":"","id":"CVE-2018-19127","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"phpcms","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"phpcms phpcms Improper Control of Generation of Code","vendor":"phpcms"}