CVE-2019-25024

CVE-2019-25024 OpenRepeater ORP / Неаутентифицированное внедрение команд Консультации: MITRE CVE: https://vulners.com/cve/CVE-2019-25024 US NIST: https://nvd.nist.gov/vuln/detail/CVE-2019-25024 Tenable: https://www.tenable.com/cve/CVE-2019-25024 VulDB: https://vuldb.com/?id.170172 Ubuntu:...

CVE-2019-25024

OpenRepeater (ORP) prior to 2.2 is affected by an unauthenticated command-injection vulnerability. The issue arises from unsafely handling shell metacharacters in the functions/ajax_system.php post_service parameter, enabling arbitrary command execution on the vulnerable system. Reported across m...

CVE-2019-25024: Improper Neutralization of Special Elements used in an OS Command

OpenRepeater ORP before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajaxsystem.php postservice parameter...