Detections
Analytics
CVE-2020-29607
high
Description
A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality, which may result in remote code execution.
References
https://github.com/VietSory/xss-cve
https://github.com/CaelumIsMe/CVE-2020-29607-POC
https://github.com/Alienfader/CVE-2020-29607
https://github.com/pluck-cms/pluck/issues/96
https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-29607.md
https://github.com/Hacker5preme/Exploits/tree/main/CVE-2020-29607-Exploit
http://packetstormsecurity.com/files/162785/Pluck-CMS-4.7.13-Remote-Shell-Upload.html