Lucene search
PRIOn knowledge basePRION:CVE-2020-25790HistorySep 19, 2020 - 9:15 p.m.
Design/Logic Flaw
2020-09-1921:15:00
PRIOn knowledge base
www.prio-n.com
6
0.116 Low
EPSS
Percentile
95.3%
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because “admins are considered trustworthy”; however, the behavior “contradicts our security policy” and is being fixed for 5.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| typesetter | ge | 5.0 | |
| typesetter | le | 5.1 |
Related
packetstorm
packetstorm
Typesetter CMS 5.1 Remote Code Execution
2020-10-20 00:00:00
cvelist
cvelist
CVE-2020-25790
2020-09-19 20:31:08
cve
cve
CVE-2020-25790
2020-09-19 21:15:12
githubexploit
githubexploit
nvd
nvd
CVE-2020-25790
2020-09-19 21:15:12
exploitdb
exploitdb
Typesetter CMS 5.1 - Arbitrary Code Execution (Authenticated)
2020-10-19 00:00:00