Showing 1 - 2 of 2

CVE-2020-25790

Status Candidate

Overview

** DISPUTED ** Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2.

Related Files

Typesetter CMS 5.1 Remote Code Execution: Posted Oct 20, 2020; Authored by Rodolfo Tavares; Typesetter CMS version 5.1 authenticated remote code execution exploit.; tags | exploit, remote, code execution; advisories | CVE-2020-25790; MD5 | be124f8d98baac1116395606bbbfd43c; Download | Favorite | View

Typesetter CMS 5.1 Remote Code Execution: Posted Oct 7, 2020; Authored by Rodolfo Tavares | Site tempest.com.br; Typesetter version 5.1 is vulnerable to code execution via /index.php/Admin/Uploaded. An attacker can exploit this by uploading a zip that contains a malicious php file inside. After extracting the zip file containing the malicious php file, it is possible to execute commands on the target operation system.; tags | advisory, php, code execution; advisories | CVE-2020-25790; MD5 | 5524c94291b9260c89573ff9a567213e; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 101 files
Ubuntu 61 files
malvuln 60 files
Google Security Research 15 files
Erik David Martin 9 files
Gentoo 7 files
Apple 5 files
0xB9 4 files
Ismael Nava 4 files
Tim Willis 4 files

File Archives

Systems

AIX (421)
Apple (1,774)
BSD (368)
Cisco (1,902)
Debian (5,945)
Fedora (1,688)
FreeBSD (1,241)
Gentoo (4,040)
HPUX (873)
iOS (284)
iPhone (108)
IRIX (220)
Juniper (67)
Linux (39,463)
Mac OS X (673)
Mandriva (3,105)
NetBSD (255)
OpenBSD (472)
RedHat (9,691)
Slackware (941)
Solaris (1,598)
SUSE (1,444)
Ubuntu (7,138)
UNIX (8,846)
UnixWare (180)
Windows (5,815)
Other

CVE-2020-25790

Overview

Related Files

File Archive:

February 2021

Top Authors In Last 30 Days

File Tags

File Archives

Systems