Vulnerabilities > CVE-2020-20698 - Missing Authorization vulnerability in S-Cms 3.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |