CVE-2018-20159

7.2 highEPSS 9.9%

i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated user with the administrator role to upload arbitrary files to the main website directory. Exploitation involves uploading a ".php" file within a ".zip" file because a ZIP archive is accepted by /admin/?req=modules&action=add as a plugin, and extracted to the main directory. In order for the ".zip" file to be accepted, it must also contain a package.json file.

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 9.9% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-12-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

i-doit:i-doit

References

https://pentest.com.tr/exploits/i-doit-CMDB-1-11-2-Remote-Code-Execution.html
https://www.exploit-db.com/exploits/45957
https://pentest.com.tr/exploits/i-doit-CMDB-1-11-2-Remote-Code-Execution.html
https://www.exploit-db.com/exploits/45957

Check your stack JSON