CVE-2019-8954

In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...

CVE-2019-8954

In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...

CVE-2019-8954

Indexhibit 2.1.5 is affected by CVE-2019-8954. The vulnerability allows remote attackers to execute arbitrary code via the v parameter (used with the id parameter) in an upd_jxcode=true action to the ndxzstudio/?a=system URI. Several connected documents corroborate code execution impact on affect...