Critical severity · published Aug 12, 2021
CVE-2020-28165
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability
9.8
CVSS
1.1%
EPSS
No
On KEV
Description
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell to the server by using the downloadZipPackage() function.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZE
Zentao · Easycorp
before 12.4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-28165
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-28165
Vendor Advisory
https://www.zentao.net/dynamic/zentaopms12.4.2-80263.html
More from Zentao
9.8
CVE-2024-24216
Zentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via the checkConnection method of /app/zentao/module/repo/model.php
9.8
CVE-2024-24202
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary…
9.1
CVE-2025-5114
easysoft zentaopms Editor index.php edit deserialization
8.8
CVE-2023-44827
An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script…
8.8
CVE-2022-47745
ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection