2 matches found
CVE-2023-53945: Improper Neutralization of Special Elements used in an OS Command
BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP a...
8.8CVSS6.4AI score0.01109EPSS
SaveExploits1References1
20