CVE-2020-10221
Yüksek CISA KEV: Aktif İstismarTeknik Veri (Otomatik)
- CVSS Skoru
- 8.8
- EPSS
- 77.1%
- CWE
- CWE-78
- KEV Durumu
- Evet
Yayım tarihi: 8 Mart 2020 · CISA KEV son iyileştirme tarihi: 3 Mayıs 2022
Etkilenen: rconfig rconfig
lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.
Referanslar
- http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html
- https://cwe.mitre.org/data/definitions/78.html
- https://engindemirbilek.github.io/rconfig-3.93-rce
- https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/rconfig-3.93-rce.html
- http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html
- https://cwe.mitre.org/data/definitions/78.html
Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.