Lucene search
PRIOn knowledge basePRION:CVE-2020-15189HistorySep 18, 2020 - 6:15 p.m.
Unrestricted file upload
2020-09-1818:15:00
PRIOn knowledge base
www.prio-n.com
4
SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload. Cross-Site Scripting(XSS) vulnerability that was used in CVE-2020-15183 can be used to increase impact by redirecting the administrator to access a specially crafted page. This vulnerability is caused by insecure configuration in elFinder. This is fixed in version 3.0.2.328.
Related
cvelist
cvelist
CVE-2020-15189 Remote Code Execution in SOY CMS
2020-09-18 17:20:16
CVE-2020-15183 Reflected XSS leading to RCE in SoyCMS
2020-09-17 20:10:13
nvd
nvd
CVE-2020-15189
2020-09-18 18:15:16
CVE-2020-15183
2020-09-17 20:15:13
cve
cve
CVE-2020-15189
2020-09-18 18:15:16
CVE-2020-15183
2020-09-17 20:15:13
osv
osv
CVE-2020-15183
2020-09-17 20:15:13
prion
prion
Cross site scripting
2020-09-17 20:15:00