CVE-2020-28173

Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using…

published March 31, 2021

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03183 · 88.0th percentile
Published
2021-03-31T12:13Z
EPSS history
Timeline
  • 31 MAR 12:13Z
    Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using…
    cvelistv5