Critical severity · published Feb 1, 2021
CVE-2020-20294
An issue was found in CMSWing project version 1.3.8
9.8
CVSS
1.8%
EPSS
No
On KEV
Description
An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary commands.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Cmswing · Cmswing
1.3.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-20294
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-20294
Exploit
https://github.com/arterli/CmsWing/issues/49
More from Cmswing
9.8
CVE-2021-43736
CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule
9.8
CVE-2021-43735
CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule
9.8
CVE-2020-20296
An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL…
9.8
CVE-2020-20295
An issue was found in CMSWing project version 1.3.8
7.5
CVE-2019-7649
global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing