security.nuyts.tech
CVE-2018-18874 – NuytsTech Security
nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "
