Exploit for CVE-2020-29607

kitploit · 2026-08-30

Description

Exploit tool for CVE-2020-29607 demonstrating the vulnerability.

Entry point

Parametercont1 · request body

Path/<pluckcmspath>/login.php

Authentication bypass vulnerability leading to file upload via Pluck CMS 4.7.13

Affected Pluck-cms Pluck versions

Pluck-cms Pluck< 4.7.13

All known vulnerabilities by product

CVSS 7.2 for CVE-2020-29607

7.2

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:HIGH

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-30 17:11

Last Seen:2026-09-04 23:11

Reporter:KitPloit

Tags

CVE-2020-29607exploit toolvulnerabilitysecurity

Other exploits for CVE-2020-29607

2026-09-11 KitPloitKITPLOIT

CVE-2020-29607-POC

2026-09-10 KitPloitKITPLOIT

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

2026-09-10 KitPloitKITPLOIT

2026-09-10 KitPloitKITPLOIT

2026-09-05 KitPloitKITPLOIT

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

2026-02-28 estebanzarateGITHUB

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

2025-10-27 CaelumIsMeGITHUB

Pluck CMS 4.7.13 - File Upload Remote Code Execution (Authenticated) Exploit

2021-05-26 zdtZDTPython

Exploit Code

MARKDOWN8 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-0XN7Y-CVE-2020-29607
# CVE-2020-29607

Эксплойт для CVE-2020-29607

# Использование

![Скриншот](https://assets.kitploit.com/production/public/readmes/14311/848835a67267878299d01ae0b5ae2f2b00b7479cdd747d93433d8fbc3c85002e.png)