CVE-2020-36942 — Victor CMS 1.0 - File Upload To RCE
Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload …
Published: 2026-01-27 · CVSS: 8.7 · CVSS 4.0
Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7