← back
CVE-2020-28687

CVE-2020-28687

EPSS 11.9%
The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.htmlunverifiedexploitdbwww.exploit-db.com/exploits/49167unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html