CVE-2020-19786 - File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file

HIGH

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file

Published Mar 23, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.80%

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

https://github.com/cskaza/cszcms/issues/20
ExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://github.com/cskaza/cszcms/issues/20		ExploitIssue TrackingThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 23, 2023

Updated Feb 25, 2025

Reserved Aug 13, 2020

Updated Feb 25, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a