Lucene search
MitreCVELIST:CVE-2020-24986HistorySep 04, 2020 - 7:29 p.m.
CVE-2020-24986
2020-09-0419:29:19
mitre
www.cve.org
1
0.001 Low
EPSS
Percentile
44.7%
Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site configuration to upload the PHP file and execute arbitrary commands.
References
Related
osv
osv
CVE-2020-24986
2020-09-04 20:15:11
prion
prion
Unrestricted file upload
2020-09-04 20:15:00
veracode
veracode
Arbitrary Code Execution
2020-09-07 05:38:07
nvd
nvd
CVE-2020-24986
2020-09-04 20:15:11
cve
cve
CVE-2020-24986
2020-09-04 20:15:11
cnvd
cnvd
PortlandLabs Concrete5 code issue vulnerability
2020-09-08 00:00:00
openvas
openvas
Concrete5 < 8.5.3 Multiple Vulnerabilities
2020-06-25 00:00:00