← All advisories

Critical severity9.8NVD Advisory· Published Oct 2, 2020· Updated Jun 17, 2026

CVE-2020-18185

CVE-2020-18185

Description

class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.

Affected products

3

Pluxml/Pluxml2 versions
cpe:2.3:a:pluxml:pluxml:5.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pluxml:pluxml:5.7:*:*:*:*:*:*:*
- (no CPE)range: =5.7
PluXml/PluXmldescription

Patches

Vulnerability mechanics

References

1

github.com/pluxml/PluXml/issues/321nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.