Non évaluée
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platfor...
CVE-2018-10642
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval().
Références
- report sourceforge.net
- report github.com