CVE-2017-1000194: October CMS File Upload Vulnerability
Severity: Critical
CVSS Score: 9.8
October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.