CVE-2020-36082

Description

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module.

Related CPE's

References

https://github.com/alexlang24/bloofoxCMS/issues/7

CvssV3 impact

CvssV2 impact