ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score

1 result for “CVE-2020-26008”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-26008
Published
2022-03-20
CVSS:
7.8
ShadowTrackr CVSS:
4.0
Summary:
The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploading a crafted PHP file.