CVE-2020-37186 — Chevereto 3.13.4 Core - Remote Code Execution
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can man…
Published: 2026-02-11 · CVSS: 9.3 · CVSS 4.0
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a crafted POST request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7