CVE-2020-19151

Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code by uploading a malicious HTML template file via the…

published September 15, 2021

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code by uploading a malicious HTML template file via the component 'jfinal_cms/admin/filemanager/list'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05031 · 92.2th percentile
Published
2021-09-15T13:52Z
EPSS history
Timeline
  • 15 SEP 13:52Z
    Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code by uploading a malicious HTML template file via the…
    cvelistv5