Non évaluée

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plugins/main_...

CVE-2020-14947 Première détection SecPulse Jul 1, 2020

Description d'origine La description telle que publiée par la source (souvent en anglais).

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plugins/main_sections/ms_config/ms_snmp_config.php is mishandled in get_mib_oid.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch github.com
report packetstormsecurity.com
report drive.google.com
report gist.github.com
report shells.systems

Faits clés

Gravité: Non évaluée
Publication: Jul 1, 2020
Première détection SecPulse: Jul 1, 2020

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51