CVE-2020-23572

2021-11-0820:46:52

mitre

www.cve.org

beescms v4.0

arbitrary file upload

vulnerability

execute arbitrary code

crafted image file

EPSS

0.002

Percentile

56.1%

JSON

BEESCMS v4.0 was discovered to contain an arbitrary file upload vulnerability via the component /admin/upload.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file.

References

github.com/source-trace/beescms/issues/6

EPSS

0.002

Percentile

56.1%

JSON

Related for CVELIST:CVE-2020-23572