CVE-2020-13384

Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, for example, .php…

published May 22, 2020

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, for example, .php filenames are blocked but .php7 filenames are not, a related issue to CVE-2017-18048.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02502 · 84.6th percentile
Published
2020-05-22T04:45Z
EPSS history
Timeline
  • 22 MAY 04:45Z
    Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, for example, .php…
    cvelistv5