PT-2019-12045 · Php · Php-Shellcommand

Publicado 2019-12-30 · Atualizado 2022-05-24 · CVE-2019-10774

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions php-shellcommand versions prior to 1.6.1

Description The issue allows for command injection, which could lead to arbitrary code execution if successfully exploited.

Recommendations For versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-10774

GHSA-C7FV-WV9F-CGJW

SNYK-PHP-MIKEHAERTLPHPSHELLCOMMAND-538426

Produtos afetados

Php-Shellcommand

Referências · 8

• 🔥 https://snyk.io/vuln/SNYK-PHP-MIKEHAERTLPHPSHELLCOMMAND-538426 · Exploit
• https://github.com/mikehaertl/php-shellcommand · Nota
• https://github.com/mikehaertl/php-shellcommand/commit/8d98d8536e05abafe76a491da87296d824939076 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10774 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-c7fv-wv9f-cgjw · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-10774 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-10774 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-10774 · Aviso do Fabricante