CVE-2020-36082 - File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module

Back Back to CVE browser

CRITICAL

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module

Published Aug 11, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.18%

Description

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23660
Advisory
https://github.com/alexlang24/bloofoxCMS/issues/7
ExploitIssue Tracking

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23660		Advisory
https://github.com/alexlang24/bloofoxCMS/issues/7		ExploitIssue Tracking

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 11, 2023

Updated Oct 9, 2024

Reserved Jan 4, 2021

Link CVE-2020-36082

CISA Vulnrichment

Updated Oct 9, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-36082

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-36082

ENISA EUVD

Assigner mitre

Published Aug 11, 2023

Updated Oct 9, 2024

Exploited since n/a

Link EUVD-2020-23660

EUVD-2020-23660