Incom CMS 2.0 File Upload

Exploit Title: IncomCMS 2.0 - Insecure File Upload Google Dork: intext:"Incom CMS 2.0" Date: 07.12.2020 Exploit Author: MoeAlBarbari Vendor Homepage: https://www.incomcms.com/ Version: 2.0 Tested on: BackBox linux CVE: CVE-2020-29597 Upload your files Upload your file...

IncomCMS 2.0 - Insecure File Upload

Exploit Title: IncomCMS 2.0 - Insecure File Upload Google Dork: intext:"Incom CMS 2.0" Date: 07.12.2020 Exploit Author: MoeAlBarbari Vendor Homepage: https://www.incomcms.com/ Version: 2.0 Tested on: BackBox linux CVE: CVE-2020-29597 Upload your files Upload your file...

CVE-2020-29597

creationtimestamp| type| source ---|---|--- 2020-12-07 22:30:17+00:00| seen| https://t.me/cibsecurity/17206 2024-12-17 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-17 2025-01-21 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2020-29597

Summary: CVE-2020-29597 affects IncomCMS 2.0, with an insecure file upload in modules/uploader/showcase/script.php that allows unauthenticated upload of files to the server. The issue is documented across multiple sources (NVD entry, Red Hat advisory, CNVD, CNVD- and CIRCL references, and exploit...