CVE-2016-20052 Snews CMS 1.7 Unrestricted File Upload via snews_files
CriticalCVSS 9.3
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files directory. Attackers can upload malicious PHP files through the multipart form-data upload endpoint and execute them by accessing the uploaded file path to achieve remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snewscms Snews CMS upload sheller | = 1.7 | No fix listed |
| snewscms snews | <= 1.7 | No fix listed |
References
- ExploitDB-40706 exploit vdb-entry
- VulnCheck Advisory: Snews CMS 1.7 Unrestricted File Upload via snews_files third-party-advisory