Remote code execution

An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable...

CVE-2017-7280: Improper Input Validation

An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable...

PT-2017-17631

Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup versions prior to 9.0.0 Description An issue was discovered in the api/includes/systems.php file, where user input is not properly filtered before being sent to a popen function, allowing for remote code execution b...