JVN#20502807 Snoopy command injection vulnerability

Snoopy is an open source PHP library. Snoopy does not properly handle user-input data. This causes a vulnerability which may allow a remote attacker to execute an arbitrary command.

Impact

An arbitrary command could be executed with the privilege of the server where Snoopy runs.

Solution

Update the Software
Apply the latest update provided by the developer.

Products Affected

• Snoopy 1.2.3 and earlier