Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-28328

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled .php file under the web root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.527
EPSS Ranking 97.8%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
Products affected by CVE-2020-28328


Contact Us

Shodan ® - All rights reserved