CVE-2020-10806

eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php...

CVE-2020-10806

The CVE-2020-10806 entry affects eZ Publish Kernel and eZ Publish Legacy, where remote attackers can execute arbitrary PHP code by uploading PHP files, unless the vhost config restricts to app.php execution. Affected versions include eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x...