CVE-2020-19302

Published: 2021-08-03T22:15Z

Last Modified: 2024-11-21T05:09Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php". > MITRE Terms of Use apply – see LICENSE‑MITRE.txt