CVE-2020-19786

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-03-23

Last modified

2025-02-25

Weaknesses

CWE-434

Affected products

• Csz Cms (Cszcms)

References

• https://github.com/cskaza/cszcms/issues/20