high8.8Public exploit code
CVE-2020-23934
An issue was discovered in RiteCMS 2.2.1.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RiteCMS 2.2.1 - Authenticated Remote Code Execution2020-07-06 · webapps · php · Verified
Impact
An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ritecms | Ritecms | Version 2.2.1 |