CVE-2020-25042

PoC ×2—

CVSS 3.1

7.2 high

EPSS

18%p97

Published

Sep 3, 2020 (Sep 3, 2020)

Modified

Jun 17, 2026

Description

An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.

Vendors: maracms
Products: maracms
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (18.2%)

In the news0 stories

No ingested article mentions this CVE yet.