CVE-2020-28165 | BDVDB-2026-158658 Detail

Description#

The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell to the server by using the downloadZipPackage() function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.zentao.net/dynamic/zentaopms12.4.2-80263.html

Exploit#

No public exploit known

History#

Version 12021-08-12Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.