CVE-2020-20092

Published May 13th, 2021

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execute arbitrary PHP code.

woider/ArticleCMS

基于 Bootstrap 3.2 和 ThinkPHP 5.0 搭建的响应式资讯网站，侧重于后台用户和文章的管理。

GitHub