← Back to browse · API

CVE-2020-11011

Severity

CRITICAL

CVSS

9.9

EPSS

0.0187

Risk score

40.25

CISA KEV

No

PoC

No

Published

2020-04-22

Modified

2024-08-04

First seen

2026-08-07

Aliases

EUVD-2020-3401

Products

Alanaktion:Phproject < 1.7.8

Sources

euvd EUVD-2020-3401

Description

In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arbitrary code. This is patched in version 1.7.8.

References