| Package | Affected versions | Patched versions |
|---|---|---|
| stream extension | = 2.4.29 |
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory. Unauthenticated attackers can execute commands by making a single HTTP POST request to the vulnerable ping.php script, which triggers the malicious file and then deletes it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free