CVE-2020-36942
Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser.
Vendor
Product
CWE
Yayın Tarihi
2026-01-27 16:16:11
Güncelleme
2026-02-10 14:53:09
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-