CVE-2020-35729: Improper Neutralization of Special Elements used in an OS Command

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter...

PT-2020-17406

Name of the Vulnerable Software and Affected Versions KLog Server version 2.4.1 Description The issue allows OS command injection via shell metacharacters in the user parameter of the "actions/authenticate.php" API endpoint. Recommendations For KLog Server version 2.4.1, avoid using the user...