high8.8Public exploit code
CVE-2020-28688
The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork2020-12-02 · webapps · multiple
Impact
The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artworks Gallery In Php\, Css\, Javascript\, And Mysql Project | Artworks Gallery In Php\, Css\, Javascript\, And Mysql | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/
- https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html
- https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/
- https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html