File Upload Vulnerability in CSKaza CSZ CMS by CSKaza
CVE-2020-19786

8.8HIGH

Key Information:

Vendor

Cszcms

Status
Csz Cms
Vendor
CVE Published:
23 March 2023

What is CVE-2020-19786?

A file upload vulnerability exists in CSKaza CSZ CMS version 1.2.2, which allows an attacker to upload a malicious PHP file. By exploiting this flaw, the attacker can execute arbitrary commands on the server, leading to potential unauthorized access and manipulation of the system. This issue has been addressed in version 1.2.4.

References

https://github.com/cskaza/cszcms/issues/20

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2020-19786 : File Upload Vulnerability in CSKaza CSZ CMS by CSKaza