CVE-2020-20670

2021-09-1322:15:07

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.

CPENameOperatorVersion
zkeacmseq2.5.1
zkeacmseq2.6.2
zkeacmseq3.1.5
zkeacmseq3.0.1
zkeacmseq3.2.0
zkeacmseq3.1.6
zkeacmseq2.9
zkeacmseq1.0.beta2
zkeacmseq1.2
zkeacmseq3.1.1

Name	Operator	Version
zkeacms	eq	2.5.1
zkeacms	eq	2.6.2
zkeacms	eq	3.1.5
zkeacms	eq	3.0.1
zkeacms	eq	3.2.0
zkeacms	eq	3.1.6
zkeacms	eq	2.9
zkeacms	eq	1.0.beta2
zkeacms	eq	1.2
zkeacms	eq	3.1.1

Rows per page:

1-10 of 341

References

github.com/yilezhu/Czar.Cms/issues/6