CVE-2020-28871

CVSS 3.1: 9.8 critical
EPSS: 86%p100
Published: Feb 10, 2021 · Feb 10, 2021
Modified: Jun 17, 2026

Analyze CVE-2020-28871 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.

Vendors: monitorr

Products: monitorr

Weakness: CWE-434

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (85.9%)

In the news

1 story

Attackers Are Taking Advantage of the Open-Source Service Interactsh for Malicious Purposes

Palo Alto Unit 42Jun 6, 01:14 UTC · Jun 6, 2024Exploit / PoCCVE-2017-9506 CVE-2017-12629 CVE-2019-2767+233