Vulnerability Allowing Full Server Takeover Found in Concrete5 CMS
A remote code execution (RCE) vulnerability addressed recently in Concrete5 exposed numerous websites to attacks, Edgescan reports.
A point and click, open-source content management system, Concrete5 allows users create websites at ease and is used by many high-profile entities worldwide, including BASF, GlobalSign, REC, the U.S. Army, and more.
Read more: Vulnerability Allowing Full Server Takeover Found in Concrete5 CMS
Story added 18. August 2020, content source with full text you can find at link above.