Command injection

2019-07-1119:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.4%

JSON

The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via “/teach/course/doajaxfileupload.php”. The target server can be exploited without authentication.

CPENameOperatorVersion
wmproeq5.0
wmproeq5.1

CPE	Name	Operator	Version
	wmpro	eq	5.0
	wmpro	eq	5.1

References

surl.twcert.org.tw/hLFFM

gist.github.com/tonykuo76/476164af9bc672281b9a3394f01c17f0

tvn.twcert.org.tw/taiwanvn/TVN-201906001