CVE-2020-26678

vFairs 3.3 is affected by Remote Code Execution

published May 26, 2021

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01785 · 78.1th percentile
Published
2021-05-26T11:50Z
EPSS history
Timeline
  • 26 MAY 11:50Z
    vFairs 3.3 is affected by Remote Code Execution
    cvelistv5