An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.
References
Link | Resource |
---|---|
https://github.com/yilezhu/Czar.Cms/issues/6 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-09-13T21:13:08
Updated: 2021-09-13T21:13:08
Reserved: 2020-08-13T00:00:00
Link: CVE-2020-20670
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-09-13T22:15:07.437
Modified: 2021-09-23T17:38:11.117
Link: CVE-2020-20670
JSON object: View
Redhat Information
No data.
CWE