CVE-2020-19267

CVE-2020-19267 affects Dswjcms 1.6.4. The issue resides in index.php/Dswjcms/Basis/resources, where lack of validation/escaping enables an attacker to upload a crafted PHP file and achieve arbitrary code execution. Impact: remote code execution via file upload. Affected/product details are limite...

CVE-2020-19267

An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file...