Unrated

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plugins/main_...

CVE-2020-14947 First seen on SecPulse Jul 1, 2020

Original description The description as published by the source.

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plugins/main_sections/ms_config/ms_snmp_config.php is mishandled in get_mib_oid.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
report packetstormsecurity.com
report drive.google.com
report gist.github.com
report shells.systems

Key facts

Severity: Unrated
Published: Jul 1, 2020
First seen on SecPulse: Jul 1, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51