CVE-2020-37117 in jizhiCMS
Zusammenfassung
von MITRE • 05.02.2026
jizhiCMS 1.6.7 contains a file download vulnerability in the admin plugins update endpoint that allows authenticated administrators to download arbitrary files. Attackers can exploit the vulnerability by sending crafted POST requests with malicious filepath and download_url parameters to trigger unauthorized file downloads.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.