CVE-2020-25287

Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an…

published September 13, 2020

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admin_editor.php the_file=..%2Findex.php&open=Open request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02711 · 85.9th percentile
Published
2020-09-13T17:58Z
EPSS history
Timeline
  • 13 SEP 17:58Z
    Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an…
    cvelistv5