PT-2015-5929 · Goadmin · Goadmin Ce

Chris Mccurley

·

Publicado

2015-05-12

·

Atualizado

2018-10-09

·

CVE-2015-2844

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions GoAdmin CE versions prior to 3.3-1420434000
Description The issue allows remote attackers to execute arbitrary commands. This is achieved via the $action portion of the PATH INFO.
Recommendations For versions prior to 3.3-1420434000, update to version 3.3-1420434000 or later to resolve the issue.

Exploit

Correção

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2015-2844

Produtos afetados

Goadmin Ce