Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.

CVE-2020-18261 · published 5 years ago
Summary

An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ed01-cms_project ed01-cms 1.0
cpe:2.3:a:ed01-cms_project:ed01-cms:1.0:*:*:*:*:*:*:*
Original advisory text
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
1% chance of attack within 30 days
Type
CWE-434Unrestricted File Upload
Timeline
Published3 Nov 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-18261 · NVD
Track software like this
Free during beta