CVE-2020-25042

HIGH 7.2CVE-2020-25042 · Published 03/09/2020 · updated 17/06/2026

In short

CVE-2020-25042 is a HIGH (CVSS 7.2) vulnerability affecting maracms (maracms).
Chance of exploitation in the next 30 days (EPSS): 18.6%, higher than 97.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
maracms maracms	`= 7.5`	No fix yet

Description

An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.

References

packetstormsecurity.com/files/159304/MaraCMS-7.5-Remote-Code-Execution.html · Exploit
sourceforge.net/projects/maracms · Product
exploit-db.com/exploits/48780 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free