CVE-2020-21976 – An arbitrary file upload in the com

An arbitrary file upload in the component of NewsOne CMS v1.1.0 allows attackers to webshell and execute arbitrary commands.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21976

Reference (s):

• https://cxsecurity.com/issue/WLB-2020010143
• URL: https://cxsecurity.com/issue/WLB-2020010143