Unrated
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes...
CVE-2020-25790
First seen on SecPulse
Original description The description as published by the source.
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2
References
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory github.com
- report packetstormsecurity.com