CVE-2020-10557

CVE-2020-10557 affects AContent up to version 1.4. The issue is an arbitrary file upload vulnerability in the file manager’s upload.php, where the .php7 extension bypasses upload restrictions, enabling a low-privileged user to run commands on the server. Red Hat and other feeds corroborate the sa...

CVE-2020-10557

An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions. Recen...