← All advisories

Critical severity9.8NVD Advisory· Published Jun 20, 2023· Updated Jun 17, 2026

CVE-2020-20735

CVE-2020-20735

Description

File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter.

Affected products

2

LJCMS/LJCMScpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 4.3.R60321

Patches

Vulnerability mechanics

References

1

github.com/0xyu/PHP_Learning/issues/2nvdBroken Link

News mentions

0

No linked articles in our index yet.