CVE-2022-4136
Exposed Dangerous Method or Function in qmpaas/leadshop
Résumé
Exposed Dangerous Method or Function in qmpaas/leadshop
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.dev