VulnSocial

CVE-2020-36942Disclosure(victor_cms_project / victor_cms)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser.

victor_cms_project CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-434

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • victor_cms

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
victor_cms_project
Products
victor_cms

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-01-28: 1Technical Details · 2026-01-28: 101-28
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2020-36942: HIGH] Beware of Victor CMS 1.0's file upload vulnerability allowing users to upload malicious PHP files through profile image upload, enabling attackers to execute system commands.#cve,CVE-2020-36942,#cybersecurity https://cvefind.com/CVE-2020-36942

    Post summary

    Victor CMS 1.0 exposes a high‑severity file‑upload flaw that permits arbitrary PHP upload and command execution, but no PoC, exploit tool, active use, patch, or debunking claim is mentioned.

    0000043
    584 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appvictor_cms_projectvictor_cms1.0--

Explore more

Back to dashboardvictor_cms_project CVEsvictor_cms vulnerabilities