CVE-2020-21976
EUVD-2020-1474211.08.2021, 18:15
An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and execute arbitrary commands.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| newsone_cms_project | newsone_cms | 1.1.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration