Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pmxp-m64w-v7f6

Опубликовано: 15 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'numara' parameter by appending shell commands with '&' operators to execute malicious code.

Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'numara' parameter by appending shell commands with '&' operators to execute malicious code.

EPSS

Процентиль: 76%
0.00947
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-78

Связанные уязвимости

nvd
около 2 месяцев назад

Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'numara' parameter by appending shell commands with '&' operators to execute malicious code.

EPSS

Процентиль: 76%
0.00947
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-78