Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q52p-wrc3-9p77

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server.

A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server.

EPSS

Процентиль: 54%
0.0031
Низкий

8.1 High

CVSS3

Дефекты

CWE-78
CWE-88

Связанные уязвимости

CVSS3: 8.1
nvd
больше 4 лет назад

A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server.

EPSS

Процентиль: 54%
0.0031
Низкий

8.1 High

CVSS3

Дефекты

CWE-78
CWE-88