An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and execute arbitrary commands.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://cxsecurity.com/issue/WLB-2020010143 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-08-11T17:41:43
Updated: 2024-08-04T14:30:33.666Z
Reserved: 2020-08-13T00:00:00
Link: CVE-2020-21976
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-08-11T18:15:07.277
Modified: 2021-08-19T17:13:13.493
Link: CVE-2020-21976
Redhat
No data.