| Package | Affected versions | Patched versions |
|---|---|---|
| aptus web | = 1.24 |
Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free