Lucene search
Veracode Vulnerability DatabaseVERACODE:26651HistorySep 07, 2020 - 5:38 a.m.
Arbitrary Code Execution
2020-09-0705:38:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
44.7%
concrete5/concrete5 is vulnerable to arbitrary code execution. The vulnerability exists as the File Manager does not restrict file types, such as .php files, which may be executed when loaded.
| CPE | Name | Operator | Version |
|---|---|---|---|
| concrete5/concrete5 | le | 8.5.2 | |
| concrete5/concrete5 | le | 8.5.2 |
Related
nvd
nvd
CVE-2020-24986
2020-09-04 20:15:11
prion
prion
Unrestricted file upload
2020-09-04 20:15:00
osv
osv
CVE-2020-24986
2020-09-04 20:15:11
cve
cve
CVE-2020-24986
2020-09-04 20:15:11
cnvd
cnvd
PortlandLabs Concrete5 code issue vulnerability
2020-09-08 00:00:00
cvelist
cvelist
CVE-2020-24986
2020-09-04 19:29:19
openvas
openvas
Concrete5 < 8.5.3 Multiple Vulnerabilities
2020-06-25 00:00:00