CVE-2020-10557

2020-03-1614:31:09

mitre

www.cve.org

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

45.0%

JSON

An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.