Lucene search

K
osvGoogleOSV:CVE-2020-11084
HistoryJul 14, 2020 - 10:15 p.m.

CVE-2020-11084

2020-07-1422:15:10
Google
osv.dev
3

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.9%

In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manually executed via “For Developers” are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data (files) from the PC.

CPENameOperatorVersion
ipeareq0.6.14-alpha
ipeareq0.6.15-alpha

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.9%

Related for OSV:CVE-2020-11084