CVE-2020-25042

An arbitrary file upload issue exists in Mara CMS 7.5

published September 3, 2020

CVSS

—

EPSS

19%

Percentile

97.3

In the wild

Unconfirmed

What it is

An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.18581 · 97.3th percentile
Published: 2020-09-03T14:23Z

EPSS history

Timeline

03 SEP 14:23Z
An arbitrary file upload issue exists in Mara CMS 7.5
cvelistv5