CVE-2020-13887

documentsadd.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder...

CVE-2020-13887

documentsadd.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder...

CVE-2020-13887

Kordil EDMS is affected by CVE-2020-13887 in versions up to 2.2.60rc3, where documents_add.php allows remote command execution because PHP files can be uploaded to the Documents folder. The vulnerability is described across multiple sources (NVD entry and CNVD/Red Hat/CVE records) as a remote cod...