Lucene search
GoogleOSV:CVE-2020-24986HistorySep 04, 2020 - 8:15 p.m.
CVE-2020-24986
2020-09-0420:15:11
Google
osv.dev
5
Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site configuration to upload the PHP file and execute arbitrary commands.
References
Related
veracode
veracode
Arbitrary Code Execution
2020-09-07 05:38:07
nvd
nvd
CVE-2020-24986
2020-09-04 20:15:11
prion
prion
Unrestricted file upload
2020-09-04 20:15:00
cve
cve
CVE-2020-24986
2020-09-04 20:15:11
cnvd
cnvd
PortlandLabs Concrete5 code issue vulnerability
2020-09-08 00:00:00
cvelist
cvelist
CVE-2020-24986
2020-09-04 19:29:19
openvas
openvas
Concrete5 < 8.5.3 Multiple Vulnerabilities
2020-06-25 00:00:00