CVE-2020-20672

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file

published September 13, 2021

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00879 · 58.7th percentile
Published
2021-09-13T21:13Z
EPSS history
Timeline
  • 13 SEP 21:13Z
    An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file
    cvelistv5