CVE-2020-20067

File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter...

CVE-2020-20067

CVE-2020-20067 affects ebCMS v1.1.0, where a user can upload via the problematic upload type parameter to achieve remote arbitrary code execution. The entry notes a high-severity impact with CVSS v3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base score 8.8). Connected sources confirm the flaw...