CVE-2020-10557

2020-03-1615:15:12

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

JSON

An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.

CPENameOperatorVersion
acontenteqacontent_1_3
acontenteqacontent_1_4

CPE	Name	Operator	Version
	acontent	eq	acontent_1_3
	acontent	eq	acontent_1_4

References

github.com/cinzinga/CVEs/tree/master/CVE-2020-10557

sourceforge.net/projects/acontent/