CVE-2020-25042: Malicious File Upload
An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25042?
CVE-2020-25042 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2020-25042?
To mitigate CVE-2020-25042, update Mara CMS to a later version that addresses the arbitrary file upload vulnerability.
What type of vulnerability is CVE-2020-25042?
CVE-2020-25042 is an arbitrary file upload vulnerability that allows attackers to upload malicious PHP files.
Who is affected by CVE-2020-25042?
CVE-2020-25042 affects users of Mara CMS version 7.5 with authenticated admin or manager access.
What could an attacker achieve by exploiting CVE-2020-25042?
An attacker exploiting CVE-2020-25042 could execute arbitrary PHP code on the server, compromising its security.