Design/Logic Flaw

2019-02-2017:29:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

JSON

In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system URI.

CPENameOperatorVersion
indexhibiteq2.1.5

CPE	Name	Operator	Version
	indexhibit	eq	2.1.5

References

www.iwantacve.cn/index.php/archives/112/