Lucene search
GoogleOSV:CVE-2020-6144HistorySep 01, 2020 - 9:15 p.m.
CVE-2020-6144
2020-09-0121:15:13
Google
osv.dev
3
cve-2020-6144
remote code execution
os4ed opensis 7.4
http request
data.php file
A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.
Related
cvelist
cvelist
CVE-2020-6144
2020-09-01 20:15:36
cve
cve
CVE-2020-6144
2020-09-01 21:15:13
prion
prion
Remote code execution
2020-09-01 21:15:00
nvd
nvd
CVE-2020-6144
2020-09-01 21:15:13
talos
talos
OS4Ed openSIS install remote code execution vulnerability
2020-08-31 00:00:00