exploitDog

CVE-2020-19786

Опубликовано: 23 мар. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

Ссылки

https://github.com/cskaza/cszcms/issues/20
Exploit
Issue Tracking
Third Party Advisory
https://github.com/cskaza/cszcms/issues/20
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cszcms:csz_cms:1.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00103

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

CWE-434

Связанные уязвимости

GHSA-m2gj-q632-499h

CVSS3: 8.8

github

почти 3 года назад

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

EPSS

Процентиль: 29%

0.00103

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

CWE-434