EUVD-2019-6491

Malware in sbrugna...

CVE-2019-15503

cgi-cpn/xcoding/prontusvideocut.cgi in AltaVoz Prontus aka ProntusCMS through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Command," allowing attackers to execute OS commands via an HTTP GET parameter...

Command injection

cgi-cpn/xcoding/prontusvideocut.cgi in AltaVoz Prontus aka ProntusCMS through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Command," allowing attackers to execute OS commands via an HTTP GET parameter...

CVE-2019-15503

The CVE-2019-15503 in AltaVoz Prontus (ProntusCMS) up to version 12.0.3.0 is tied to an Improper Neutralization of Special Elements used in an OS Command (command injection) in cgi-cpn/xcoding/prontus_videocut.cgi. It allows an attacker to execute OS commands via an HTTP GET parameter, enabling r...

CVE-2019-15503: Improper Neutralization of Special Elements used in an OS Command

cgi-cpn/xcoding/prontusvideocut.cgi in AltaVoz Prontus aka ProntusCMS through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Command," allowing attackers to execute OS commands via an HTTP GET parameter...

PT-2019-14230

Name of the Vulnerable Software and Affected Versions AltaVoz Prontus aka ProntusCMS versions prior to 12.0.3.0 Description The issue is related to "Improper Neutralization of Special Elements used in an OS Command" in the cgi-cpn/xcoding/prontus videocut.cgi component. This allows attackers to...