CVE-2018-11736
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 8.6%
from disclosure to weapon2743 days
Published on NVDJun 5
1st PoC+2743d
exploitation probability
8.6%top 5% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
An issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote attackers to upload and execute arbitrary PHP code by using the image/jpeg content type for a .htaccess file.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/52460unverifiedgithubgithub.com/purgemebaby/CVE-2018-11736★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.