Description
MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.
Unscored
CVE-2020-28672
EUVD-2020-21070GHSA-pgm3-3759-c76g
MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, us…
Published Jan 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre