CVE-2020-23934 - An issue was discovered in RiteCMS 2.2.1

Back Back to CVE browser

HIGH

An issue was discovered in RiteCMS 2.2.1

Published Aug 18, 2020

8.8

HIGH

CVSS 3.1

EPSS 15.96%

Description

An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16671
Advisory
https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23934
x_refsource_MISCThird Party Advisory
https://www.exploit-db.com/exploits/48636
x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16671		Advisory
https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23934		x_refsource_MISCThird Party Advisory
https://www.exploit-db.com/exploits/48636		x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 18, 2020

Updated Aug 4, 2024

Reserved Aug 13, 2020

Link CVE-2020-23934

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-23934

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 18, 2020

Updated Aug 4, 2024

Link EUVD-2020-16671

GitHub

No data