CVE-2016-20052
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files directory. Attackers can upload malicious PHP files through the multipart form-data upload endpoint and execute them by accessing the uploaded file path to achieve remote code execution.
Risk Assessment
The risk for the organization includes the possibility of remote code execution by an unauthenticated attacker, which can lead to full server compromise, data theft, or further escalation of attacks within the infrastructure.
Recommendation
Immediately update Snews CMS to the latest version that fixes this vulnerability, or apply a workaround by disabling the file upload endpoint and restricting permissions to the snews_files directory.
Original NVD description (English source)
Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files directory. Attackers can upload malicious PHP files through the multipart form-data upload endpoint and execute them by accessing the uploaded file path to achieve remote code execution.