Lucene search
China National Vulnerability DatabaseCNVD-2022-08154HistoryJan 26, 2022 - 12:00 a.m.
QuickBox code injection vulnerability
2022-01-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
0.006 Low
EPSS
Percentile
79.4%
QuickBox is a media server application and service management system from the QuickBox team. A code injection vulnerability exists in QuickBox Pro v2.5.8 and below due to a variable in the config.php file that accepts a GET parameter value and parses it as shell_exec() and fails to properly clean up any shell parameters. An attacker could use this vulnerability to remotely execute code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| quickbox quickbox pro <=v | eq | 2.5.8 | |
| quickbox quickbox community | le | 2.5.8 |
Related
prion
prion
Remote code execution
2022-01-24 13:15:00
cvelist
cvelist
CVE-2021-44981
2022-01-24 12:26:11
cve
cve
CVE-2021-44981
2022-01-24 13:15:08
osv
osv
CVE-2021-44981
2022-01-24 13:15:08
nvd
nvd
CVE-2021-44981
2022-01-24 13:15:08