Em resumo
- CVE-2020-10235 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta froxlor/froxlor, froxlor (froxlor).
- Chance de exploração nos próximos 30 dias (EPSS): 1.7%, maior que 77.0% das vulnerabilidades.
- Correção: atualize para 0.10.14 ou posterior.
Description
An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of _backupExistingDatabase in install/lib/class.FroxlorInstall.php.
NVD description
An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of _backupExistingDatabase in install/lib/class.FroxlorInstall.php.
Mais vulnerabilidades de froxlor/froxlor
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free