Description
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell to the server by using the downloadZipPackage() function.
Unscored
CVE-2020-28165
EUVD-2020-20651GHSA-p999-983h-mw4g
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell t…
Published Aug 12, 2021 · Updated Aug 4, 2024 · Assigned by mitre