CVE-2020-27386

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code e.g., ASP code in the form of a safe file type e.g., a TXT file, and then using the FileEditor in v1.5.8...

FlexDotnetCMS 1.5.8 Arbitrary ASP File Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FlexDotnetCMS Arbitrary ASP File Upload', 'Description' = %q This module exploits an arbitrary file upload vulnerability in FlexDotnetCMS v1.5.8...

CVE-2020-27386

creationtimestamp| type| source ---|---|--- 2020-11-12 22:32:16+00:00| seen| https://t.me/cibsecurity/16269 2020-12-07 20:36:07+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/flexdotnetcmsuploadexec.rb 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-27386

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code e.g., ASP code in the form of a safe file type e.g., a TXT file, and then using the FileEditor in v1.5.8...

CVE-2020-27386

Vulnerability (CVE-2020-27386) in FlexDotnetCMS prior to 1.5.9 allows an authenticated attacker to upload arbitrary files via the FileManager, upload a safe file (e.g., TXT), rename it to an executable extension (e.g., ASP) using FileEditor or FileManager rename, and execute it via HTTP GET. Impa...

CVE-2020-27386

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code e.g., ASP code in the form of a safe file type e.g., a TXT file, and then using the FileEditor in v1.5.8...