CVE-2020-21474

File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter...

CVE-2020-21474

File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter...

CVE-2020-21474

CVE-2020-21474 in NucleusCMS 3.71 is a file upload vulnerability in the skinfiles endpoint ( /nucleus/plugins/skinfiles/?dir=rsd ) that allows a remote attacker to execute arbitrary code. The issue stems from the /skinfiles/ parameter handling, enabling arbitrary code execution on the affected sy...