CVE-2020-26037

CriticalCVSS 9.8/10Last modified Jul 9, 2026

Description

Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Aug 16, 2023
Last modified
Jul 9, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-26048.1Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected arCVE-2020-260419.8An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.phpCVE-2020-260429.8An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.phpCVE-2020-260436.1An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.phpCVE-2020-260459.8FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to comCVE-2020-260465.4FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulCVE-2020-260488.8The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension CVE-2020-260496.1Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution.CVE-2020-26057.1Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily CVE-2020-260507.8SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted oCVE-2020-260519.8College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtCVE-2020-260525.4Online Marriage Registration System 1.0 is affected by stored cross-site scripting (XSS) vulnerabilities in multiple parameters.