Поиск уязвимостей
Количество 3
Количество 3
CVE-2018-10642
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval().
GHSA-w7xq-2x44-5m2x
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval().
ALT-PU-2019-1356
ALT-PU-2019-1356: package `itop` update to version 2.6.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-10642 Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval(). | CVSS3: 7.2 | 7% Низкий | больше 8 лет назад |
| GHSA-w7xq-2x44-5m2x Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval(). | CVSS3: 7.2 | 7% Низкий | больше 4 лет назад |
| ALT-PU-2019-1356 ALT-PU-2019-1356: package `itop` update to version 2.6.0-alt1 | CVSS3: 7.2 | больше 7 лет назад |
Уязвимостей на страницу