NetSight
critical9.8

CVE-2020-36082

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to…

Impact

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module.

Affected products

VendorProductAffected versions
BloofoxBloofoxcms
Version 0.5.2.1

Weakness classification

References