Vulnerabilities (CVE)

Filtered by vendor Atutor Subscribe
Filtered by product Acontent
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10557 1 Atutor 1 Acontent 2020-03-18 6.5 MEDIUM 8.8 HIGH
An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.