high7.2
CVE-2020-28672
MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution.
Impact
MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monocms | Monocms | Version 1.0 |