CVE-2020-15188
Unauthenticated Remote Code Execution in SOY CMS
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 10EPSS 5.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
18 sep 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE). The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed in 3.0.2.328.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
inunosinsi · soycms¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →