NA

CVE-2020-28320

Published: 26/01/2021 Updated: 07/11/2023

Vulnerability Summary

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none

Vulnerability Trend

Exploits

This Metasploit module exploits an input validation error on the log file extension parameter of SuiteCRM version 71118 It does not properly validate upper/lower case characters Once this occurs, the application log file will be treated as a php file The log file can then be populated with php code by changing the username of a valid user, as ...
This Metasploit module exploits an input validation error on the log file extension parameter It does not properly validate upper/lower case characters Once this occurs, the application log file will be treated as a php file The log file can then be populated with php code by changing the username of a valid user, as this info is logged The php ...