CVE-2020-7935

Katalog CVE

CVSS 7.2 · High EPSS 3,1%

Kerentanan Unrestricted Upload of File with Dangerous Type pada artica pandora fms. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

Artica Pandora FMS through 7.42 is vulnerable to remote PHP code execution because of an Unrestricted Upload Of A File With A Dangerous Type issue in the File Manager. An attacker can create a (or use an existing) directory that is externally accessible to store PHP files. The filename and the exact path is known by the attacker, so it is possible to execute PHP code in the context of the application. The vulnerability is exploitable only with Administrator access.

Rincian

Terbit di NVD

23 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://k4m1ll0.com/cve-2020-7935.html exploit · advisory pihak ketiga