GitHub Advisoryadvisory · Packagist
GHSA-rf3w-29h3-r636 Arbitrary Code Execution in feehi/cms
HIGH
Official page ↗
- Aliases
- CVE-2020-21322
- Ecosystem
- Packagist
- Packages
- feehi/cms
- Severity
- High
- Weaknesses
- CWE-434
- Reviewed
- 2021-09-17
Affected packages
• Packagist feehi/cms: < 2.0.8.1 → fixed in 2.0.8.1
Description
An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.
Related
Alias · CVE (1)
- CVE-2020-21322 An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file. vulnerability
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness