CVE-2020-25790
HIGHTypesetter CMS 5.0-5.1 - Authenticated Remote Code Execution via ZIP Archive Upload
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-25790. PoCs published by Rodolfo Tavares, 7Mitu.
AI-analyzed exploit summary This exploit demonstrates arbitrary code execution in Typesetter CMS 5.1 by uploading a malicious ZIP file containing a PHP payload via the admin interface, then extracting and executing it. It requires valid admin credentials and interacts with the CMS's file management functionality.
Description
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2
Exploits (2)
This exploit demonstrates arbitrary code execution in Typesetter CMS 5.1 by uploading a malicious ZIP file containing a PHP payload via the admin interface, then extracting and executing it. It requires valid admin credentials and interacts with the CMS's file management functionality.
This repository provides a Docker environment for reproducing CVE-2020-25790, a file upload vulnerability in Typesetter CMS. It includes setup instructions and a demonstration of the exploit process.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H