CVE-2020-10557

An issue was discovered in AContent through 1.4

published March 16, 2020

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01373 · 71.8th percentile
Published
2020-03-16T14:31Z
EPSS history
Timeline
  • 16 MAR 14:31Z
    An issue was discovered in AContent through 1.4
    cvelistv5