Security Advisory
CVE-2020-28165
9.8
CRITICAL
Vulnerability Description
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell to the server by using the downloadZipPackage() function.
Published Date
August 12, 2021
Official Source
NIST NVD Advisory