CVE-2022-4136
Exposed Dangerous Method or Function in qmpaas/leadshop
概要
Exposed Dangerous Method or Function in qmpaas/leadshop
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.dev