CVE-2016-20052

Name of the Vulnerable Software and Affected Versions Snews CMS version 1.7

Description An unrestricted file upload issue allows unauthenticated attackers to upload arbitrary files, including PHP executables, to the snews files directory. By using the multipart form-data upload endpoint, an attacker can upload malicious PHP files and execute them by accessing the uploaded file path, leading to remote code execution (RCE), which is the ability to execute arbitrary commands on a remote machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.