← All advisories

High severity8.8NVD Advisory· Published Mar 23, 2023· Updated Jun 17, 2026

CVE-2020-19786

CVE-2020-19786

Description

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

Affected products

4

CSKaza CSZ CMS/CSKaza CSZ CMSdescription
CSZ CMS/cszcmsllm-create3 versions
<1.2.4+ 2 more
- (no CPE)range: <1.2.4
- (no CPE)range: <1.2.4
- cpe:2.3:a:cszcms:csz_cms:1.2.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

github.com/cskaza/cszcms/issues/20nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.