Command injection

jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data...

CVE-2018-19793

jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data...

PT-2018-15095

Name of the Vulnerable Software and Affected Versions jiacrontab version 1.4.5 Description The issue allows remote attackers to execute arbitrary commands. This can be achieved via the crontab/task/edit API endpoint, specifically by manipulating the command and args parameters in the POST data. F...

CVE-2018-19793: Undefined Security Weakness

jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data...