High severity8.8NVD Advisory· Published Mar 16, 2020· Updated Jun 17, 2026

CVE-2020-10557

Description

An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AContent/AContentdescription
Atutor/Acontentllm-create
Range: <=1.4

Patches

Vulnerability mechanics

References

github.com/cinzinga/CVEs/tree/master/CVE-2020-10557nvdExploitThird Party Advisory
sourceforge.net/projects/acontent/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000