InoERP Remote Code Execution (CVE-2020-28870)

A remote code execution vulnerability exists in InoERP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-28870

In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/formpersonalization/jsonfp.php...

CVE-2020-28870

CVE-2020-28870 affects InoERP 0.7.2, where lack of validations in /modules/sys/form_personalization/json_fp.php enables an unauthorized attacker to execute arbitrary server-side code. Multiple sources (NVD, Red Hat advisory, other vendor trackers) document remote code execution potential with hig...