Unrated severityNVD Advisory· Published Sep 13, 2020· Updated Aug 4, 2024
CVE-2020-25287
CVE-2020-25287
Description
Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admin_editor.php the_file=..%2Findex.php&open=Open request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Pligg/Pliggdescription
Patches
Vulnerability mechanics
References
1- github.com/jenaye/pligg/blob/master/README.mdmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.