CVE-2015-10009

A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file app/controllers/codecallercontroller.php. The manipulation of the argument q with the input %5C%27%29;phpinfo%28%29;/ leads to code injection. The exploit has...

CVE-2015-10009

CVE-2015-10009 affects nterchange up to version 4.1.0. The vulnerability targets the getContent function in app/controllers/code_caller_controller.php, where input for the parameter q can be manipulated (example: %5C%27%29;phpinfo%28%29;/*) to achieve code injection. The exploit has been publicly...