CVE-2020-6144

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in inst...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

report talosintelligence.com