{"id":"CVE-2020-15188","published":"2020-09-18T17:05:18Z","modified":"2024-08-04T13:08:22Z","title":"Unauthenticated Remote Code Execution in SOY CMS","vendor":"inunosinsi","product":"soycms","tier":"core","eol":null,"affectedVersions":[{"vendor":"inunosinsi","product":"soycms","versions":["< 3.0.2.328"]}],"description":{"text":"SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE). The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed in 3.0.2.328.","provenance":"source","from":"CVE.org"},"summary":{"text":"SOY CMS 3.0.2.327 and earlier is affected by unauthenticated remote code execution, allowing remote attackers to execute arbitrary code when the inquiry form feature is enabled. The vulnerability is caused by unserializing the form without restrictions and was fixed in 3.0.2.328.","provenance":"ai","model":"deepseek-v4-flash","generatedAt":"2026-10-23T03:20:13Z"},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.05083,"percentile":0.92314,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-502","name":"Deserialization of Untrusted Data"}],"references":[{"url":"https://github.com/inunosinsi/soycms/security/advisories/GHSA-hrrx-m22r-p9jp","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/inunosinsi/soycms/issues/10","tags":["x_refsource_MISC"]},{"url":"https://github.com/inunosinsi/soycms/pull/12/commits/a75642989132dd25f74a13194b27c0986c3de020","tags":["x_refsource_MISC"]},{"url":"https://www.youtube.com/watch?v=zAE4Swjc-GU&feature=youtu.be","tags":["x_refsource_MISC"]}],"techniques":[{"id":"T1133","name":"External Remote Services","tactics":["initial-access","persistence"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"exploitation_technique","evidence":[],"confidence":"high"},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["execution"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"primary_impact","evidence":[],"confidence":"high"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2020-7252","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7252","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1133"],"provenance":"source"},{"stage":"primary","techniques":["T1059"],"provenance":"source"}],"timeline":[{"date":"2020-09-18","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2020-15188","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":25.5,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.46,"detail":"percentile 0.9231"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":7.0,"detail":"base score 10"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}