CVE-2020-28687

PoC —

CVSS 3.1

8.8 high

EPSS

12%p96

Published

Nov 17, 2020 (Nov 17, 2020)

Modified

Jun 17, 2026

Description

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.

Vendors: artworks gallery in php\, css\, javascript\, and mysql project
Products: artworks gallery in php\, css\, javascript\, and mysql
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.0%)

In the news0 stories

No ingested article mentions this CVE yet.