high8.8Public exploit code
CVE-2020-28687
The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile2020-12-02 · webapps · multiple
Impact
The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artworks Gallery In Php\, Css\, Javascript\, And Mysql Project | Artworks Gallery In Php\, Css\, Javascript\, And Mysql | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/
- https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html
- https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/
- https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html