CVE-2018-11686 The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.
CriticalCVSS 9.8
EPSS 52.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flowpaper flexpaper | <= 2.3.6 | No fix listed |
References
- flowpaper.com release-notes third-party-advisory
- redtimmysec.wordpress.com exploit patch third-party-advisory