Lucene search
GoogleOSV:CVE-2020-6143HistorySep 01, 2020 - 9:15 p.m.
CVE-2020-6143
2020-09-0121:15:13
Google
osv.dev
3
remote code execution
os4ed opensis 7.4
install functionality
php code injection
http request
vulnerability
A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.
Related
cvelist
cvelist
CVE-2020-6143
2020-09-01 20:15:25
prion
prion
Remote code execution
2020-09-01 21:15:00
nvd
nvd
CVE-2020-6143
2020-09-01 21:15:13
cve
cve
CVE-2020-6143
2020-09-01 21:15:13
talos
talos
OS4Ed openSIS install remote code execution vulnerability
2020-08-31 00:00:00