php-shellcommand command injection vulnerability

CRITICO 9.8CVE-2019-10774 · GHSA-c7fv-wv9f-cgjw · SNYK-PHP-MIKEHAERTLPHPSHELLCOMMAND-538426 · Published 30/12/2019 · updated 17/06/2026

In breve

CVE-2019-10774 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda mikehaertl/php-shellcommand, php-shellcommand (php-shellcommand project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.6%, superiore al 91.8% delle vulnerabilità.
Correzione: aggiornare a 1.6.1 o successiva.

Package	Affected versions	Patched versions
mikehaertl/php-shellcommand Packagist	`< 1.6.1`	`1.6.1`
php-shellcommand php-shellcommand_project	`< 1.6.1`	`1.6.1`

php-shellcommand versions before 1.6.1 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

NVD description

php-shellcommand versions before 1.6.1 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.