liufee/cms · Security
Arbitrary Code Execution in feehi/cms
- GHSA ID
- GHSA-rf3w-29h3-r636
- CVE ID
- CVE-2020-21322
- Severity
- high
- Published
- Updated
Description
An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.
CWEs
- CWE-434 · Unrestricted Upload of File with Dangerous Type