CVE-2017-1000119

CVE-2017-1000119 describes a critical PHP code execution vulnerability in October CMS build 412, specifically within its file upload functionality. This flaw, rated 7.2 HIGH, allows authenticated attackers to execute arbitrary code, leading to complete site compromise and potential impact on other server applications. While not on the KEV catalog or Hot List, a Metasploit module exists for this exploit, indicating readily available exploit code. Despite the high risk, there is no evidence of active exploitation, and community discussion and media coverage are minimal.