NetSight
high8.8

CVE-2020-21861

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.

Impact

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.

Affected products

VendorProductAffected versions
Duxcms ProjectDuxcms
Version 2.1

Weakness classification

References