Description
Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site configuration to upload the PHP file and execute arbitrary commands.
Unscored
CVE-2020-24986
EUVD-2020-17686GHSA-36v6-hf6j-m7qp
Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is poss…
Published Sep 4, 2020 · Updated Aug 4, 2024 · Assigned by mitre