← Back

Earcms

earcms

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Ear Music
ear_music
1 CVE
Ear
ear
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-18912
1Earcms
1Ear
Jun 17, 2026
Aug 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php.
CVE-2017-11756
1Earcms
1Ear Music
May 13, 2026
Jul 30, 2017
N/A· v4
7.0 HIGH· v3
6.0 MEDIUM· v2
In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to include .php in addition to .mp3 and .m4a in admin.php?iframe...Show more
In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to include .php in addition to .mp3 and .m4a in admin.php?iframe=config_upload, and then using user.php/music/add/ to upload the code.Show less