CVE-2018-1999009 Local File Inclusion in October CMS

By Andres Liiver in Full Disclosures on

LFI from X-OCTOBER-REQUEST-PARTIALS request header in October CMS. Background Back-end partials are files with the extension .htm that reside in the controller's views directory. The partial file names start with underscore: _partial.htm. Partials can be requested with the X-OCTOBER-REQUEST-PARTIALS header. Normally the header only contains a partial’…