VULNERABILITY INTELLIGENCE

CVE-2020-19527

CVSS score10 HIGH

EPSS probability1.55%

CISA KEVNot currently listed

Published2020-12-10

Last modified2026-06-17

Description

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.