critical9.8
CVE-2020-25483
An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.
Impact
An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ucms Project | Ucms | Version 1.4.8 |