Vulnerability Details CVE-2020-25406
app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.2%
CVSS Severity
CVSS v3 Score 7.3
CVSS v2 Score 7.5
References
Products affected by CVE-2020-25406
-
cpe:2.3:a:lemocms:lemocms:1.8.0
-
cpe:2.3:a:lemocms:lemocms:1.8.1
-
cpe:2.3:a:lemocms:lemocms:1.8.2
-
cpe:2.3:a:lemocms:lemocms:1.8.3
-
cpe:2.3:a:lemocms:lemocms:1.8.4
-
cpe:2.3:a:lemocms:lemocms:1.8.5
-
cpe:2.3:a:lemocms:lemocms:1.8.6
-
cpe:2.3:a:lemocms:lemocms:1.8.7