Beveiligingsadvies

CVE-2020-26008

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-20 21:12:01
Laatst bijgewerkt 2024-08-04 15:49:06
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploading a crafted PHP file.