Code injection

2023-02-1718:15:00

PRIOn knowledge base

www.prio-n.com

code injection

feminer wms

arbitrary code execution

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function.

CPENameOperatorVersion
wmseq1.1

CPE	Name	Operator	Version
	wms	eq	1.1

References

github.com/FeMiner/wms/issues/10