CVE-2020-19551

Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause remote code executiong.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
wuzhicmswuzhicms
𝑥
≤ 4.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/wuzhicms/wuzhicms/issues/177
https://github.com/wuzhicms/wuzhicms/issues/177