CVE-2020-5554

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
EKAKINShihonkanri Plus GOOUTVer1.5.8 and Ver2.2.10

References

Timeline

Published
Mar 25, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-55559.1Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory whereCVE-2020-55569.8Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors.CVE-2020-55576.1Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2020-55588.8CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.CVE-2020-55596.1Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified veCVE-2020-55609.8WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors.CVE-2020-55619.8Keijiban Tsumiki v1.15 allows remote attackers to execute arbitrary OS commands via unspecified vectors.CVE-2020-55624.9Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege tCVE-2020-55635.3Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via thCVE-2020-55646.1Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the aCVE-2020-55654.3Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's dCVE-2020-55664.3Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data
CVE-2020-5554: Critical severity, CVSS 9.1 | Vulnix