critical9.8
CVE-2020-21787
CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.
Impact
CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crmeb | Crmeb | Version 3.1.0\+ |