CVE-2020-28672

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution

published January 7, 2021

CVSS
—
EPSS
12%
Percentile
96.2
In the wild
Unconfirmed
What it is

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12144 · 96.2th percentile
Published
2021-01-07T14:47Z
EPSS history
Timeline
  • 07 JAN 14:47Z
    MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution
    cvelistv5