CVE-2020-19551

EUVD-2020-11455
Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause remote code executiong.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Affected Products (NVD)
VendorProductVersion
wuzhicmswuzhicms
𝑥
≤ 4.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/wuzhicms/wuzhicms/issues/177
https://github.com/wuzhicms/wuzhicms/issues/177