high7.2
CVE-2020-25042
An arbitrary file upload issue exists in Mara CMS 7.5.
Impact
An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maracms | Maracms | Version 7.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159304/MaraCMS-7.5-Remote-Code-Execution.html
- https://sourceforge.net/projects/maracms/
- https://www.exploit-db.com/exploits/48780
- http://packetstormsecurity.com/files/159304/MaraCMS-7.5-Remote-Code-Execution.html
- https://sourceforge.net/projects/maracms/
- https://www.exploit-db.com/exploits/48780