Filtered by vendor Altavoz Subscriptions
Filtered by product Prontuscms Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-15503 1 Altavoz 1 Prontuscms 2024-11-21 N/A
cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Command," allowing attackers to execute OS commands via an HTTP GET parameter.