CVE-2020-20670

An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file

published September 13, 2021

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01747 · 77.6th percentile
Published
2021-09-13T21:13Z
EPSS history
Timeline
  • 13 SEP 21:13Z
    An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file
    cvelistv5