Log1 CMS is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system other attacks are also possible. Log1 CMS 2.0 is vulnerable other versions may also be affected.

• http://www.securityfocus.com/bid/50523

---

Updated on 2015-03-25