Lucene search
PRIOn knowledge basePRION:CVE-2020-35235HistoryDec 14, 2020 - 3:15 a.m.
Remote code execution
2020-12-1403:15:00
PRIOn knowledge base
www.prio-n.com
3
vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
| CPE | Name | Operator | Version |
|---|---|---|---|
| secure_file_manager | le | 2.5 |
Related
vulnrichment
vulnrichment
CVE-2020-35235
2020-12-14 02:20:27
cvelist
cvelist
CVE-2020-35235
2020-12-14 02:20:27
wpvulndb
wpvulndb
Secure File Manager < 2.8.2 - Authenticated Remote Command Execution
2020-11-23 00:00:00
nvd
nvd
CVE-2020-35235
2020-12-14 03:15:13
wpexploit
wpexploit
Secure File Manager < 2.8.2 - Authenticated Remote Command Execution
2020-11-23 00:00:00
cve
cve
CVE-2020-35235
2020-12-14 03:15:13