system
Describe <CVE-2020-28165>.
user
What is <CVE-2020-28165>?
assistant
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell to the server by using the downloadZipPackage() function..