Lucene search
Veracode Vulnerability DatabaseVERACODE:25999HistoryJul 30, 2020 - 8:32 a.m.
Unrestricted File Upload
2020-07-3008:32:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.003 Low
EPSS
Percentile
70.2%
concrete5/concrete5 allows unrestricted file uploads. An attacker is able to upload a malicious PHP file with a file extension such as .phar, which would cause the server to execute PHP codes within the file under the context of the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| concrete5/concrete5 | le | 8.5.2 | |
| concrete5/concrete5 | le | 8.5.2 |
Related
osv
osv
Unrestricted Uploads in Concrete5
2021-11-03 17:29:29
CVE-2020-11476
2020-07-28 21:15:14
cve
cve
CVE-2020-11476
2020-07-28 21:15:14
nvd
nvd
CVE-2020-11476
2020-07-28 21:15:14
prion
prion
Unrestricted file upload
2020-07-28 21:15:00
cvelist
cvelist
CVE-2020-11476
2020-07-28 20:31:14
github
github
Unrestricted Uploads in Concrete5
2021-11-03 17:29:29
openvas
openvas
Concrete5 < 8.5.3 Multiple Vulnerabilities
2020-06-25 00:00:00