Lucene search
China National Vulnerability DatabaseCNVD-2021-94149HistoryNov 09, 2021 - 12:00 a.m.
BEESCMS arbitrary file upload vulnerability
2021-11-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
beescms
file upload
vulnerability
php
mysql
seo
exploit
code
image files
cnvd
EPSS
0.002
Percentile
56.1%
BEESCMS is a template program completely separated, using PHP MYSQL technology development, with powerful SEO features, simple operation of the self-service building system. BEESCMS version 4.0 /admin/upload.php in the arbitrary file upload vulnerability. The vulnerability can be exploited by attackers to execute arbitrary code via specially crafted image files.
Related
cve
cve
CVE-2020-23572
2021-11-08 21:15:07
cvelist
cvelist
CVE-2020-23572
2021-11-08 20:46:52
prion
prion
Privilege escalation
2021-11-08 21:15:00
nvd
nvd
CVE-2020-23572
2021-11-08 21:15:07