CVE-2017-1000196

CVE-2017-1000196 describes a critical PHP code execution vulnerability in October CMS build 412, affecting the asset manager functionality. This flaw allows an unauthenticated attacker to execute arbitrary code remotely, leading to complete compromise of the website and potentially other applications on the server. With a CVSS score of 9.8, it is easily exploitable over the network with low attack complexity, resulting in high impact to confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the high risk score and critical severity warrant immediate patching.