CVE-2018-14857

CVE-2018-14857 is an unrestricted file upload vulnerability in the Webconsole component of OCS Inventory NG OCS Inventory Server versions through 2.5. A privileged attacker can exploit this flaw by uploading a malicious template file containing PHP code, leading to remote code execution on the server. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, potentially resulting in complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.