Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2020-20969
Disclosure Date: June 20, 2023 (last updated October 08, 2023)
File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file.
0
Attacker Value
Unknown
CVE-2020-20919
Disclosure Date: June 20, 2023 (last updated October 08, 2023)
File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information via the theme.php file.
0
Attacker Value
Unknown
CVE-2020-20918
Disclosure Date: June 20, 2023 (last updated October 08, 2023)
An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page.
0
Attacker Value
Unknown
CVE-2020-24740
Disclosure Date: May 18, 2021 (last updated February 22, 2025)
An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage
0
Attacker Value
Unknown
CVE-2020-20951
Disclosure Date: May 18, 2021 (last updated February 22, 2025)
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files.
0
Attacker Value
Unknown
CVE-2020-21564
Disclosure Date: September 30, 2020 (last updated February 22, 2025)
An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files.
0
