lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-03-08T21:03:47
Updated: 2024-08-04T10:58:39.079Z
Reserved: 2020-03-08T00:00:00
Link: CVE-2020-10221
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-03-08T22:15:11.120
Modified: 2024-11-21T04:54:59.587
Link: CVE-2020-10221
Redhat
No data.