CyberRota Analysis
AI analysis pending.
CVE
CVE-2020-28165
Severity
CRITICAL
CVSS
9.8
EPSS
1.09%
Original NVD Description
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell to the server by using the downloadZipPackage() function.
Related CVEs
Other vulnerabilities affecting the same vendor(s)