High severity8.8NVD Advisory· Published Mar 16, 2020· Updated Jun 17, 2026

CVE-2020-10557

Description

An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atutor/Acontent2 versions
cpe:2.3:a:atutor:acontent:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:atutor:acontent:*:*:*:*:*:*:*:*range: <=1.4
- (no CPE)range: <=1.4
AContent/AContentdescription

Patches

Vulnerability mechanics

References

github.com/cinzinga/CVEs/tree/master/CVE-2020-10557nvdExploitThird Party Advisory
sourceforge.net/projects/acontent/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000