PT-2026-5465 · Koken Cms · Koken Cms

V1N1V131R4 · Publicado 2026-01-30 · Atualizado 2026-01-30 · CVE-2020-37023

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Koken CMS version 0.22.24

Description Koken CMS contains a file upload issue that permits authenticated attackers to circumvent file extension limitations by renaming malicious PHP files. Attackers can upload PHP files capable of executing system commands by altering the file upload request using a web proxy and modifying the file extension. The issue allows bypassing file extension restrictions.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2020-37023

Produtos afetados

Koken Cms

Referências · 7

• 🔥 https://github.com/V1n1v131r4/Bypass-File-Upload-on-Koken-CMS/blob/master/README.md · Exploit
• 🔥 https://exploit-db.com/exploits/48706 · Exploit
• https://vulncheck.com/advisories/koken-cms-arbitrary-file-upload · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37023 · Nota de Segurança
• https://softaculous.com/apps/cms/Koken · Nota
• https://t.me/cveNotify/150478 · Publicação no Telegram
• http://koken.me · Nota