CVE-2020-28672

Published: 2021-01-07T15:15Z

Last Modified: 2024-11-21T05:23Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt