CVE-2020-29607

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality, which may result in remote code execution.

• CWE-434

• http://packetstormsecurity.com/files/162785/Pluck-CMS-4.7.13-Remote-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/Hacker5preme/Exploits/tree/main/CVE-2020-29607-ExploitExploit, Third Party Advisory
• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-29607.md
• https://github.com/pluck-cms/pluck/issues/96Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/162785/Pluck-CMS-4.7.13-Remote-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/Hacker5preme/Exploits/tree/main/CVE-2020-29607-ExploitExploit, Third Party Advisory
• https://github.com/pluck-cms/pluck/issues/96Exploit, Third Party Advisory

Published

Dec 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29601The official notary docker images before signer-0.6.1-1 cont…9.8
• CVE-2020-29602The official irssi docker images before 1.1-alpine (Alpine s…9.8
• CVE-2020-29603In manage_proj_edit_page.php in MantisBT before 2.24.4, any …4.3
• CVE-2020-29604An issue was discovered in MantisBT before 2.24.4. A missing…6.5
• CVE-2020-29605An issue was discovered in MantisBT before 2.24.4. Due to in…4.3
• CVE-2020-29606Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-29608An out-of-bounds read was addressed with improved bounds che…5.5
• CVE-2020-2961Vulnerability in the Enterprise Manager Base Platform produc…9.8
• CVE-2020-29610An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2020-29611An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-29612An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-29613A logic issue was addressed with improved state management. …5.5