An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-09-03T14:23:13
Updated: 2024-08-04T15:26:09.009Z
Reserved: 2020-08-31T00:00:00
Link: CVE-2020-25042
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-09-03T15:15:11.677
Modified: 2022-12-03T15:01:52.890
Link: CVE-2020-25042
Redhat
No data.