CVE-2018-15529

A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenticated users, with access to the admin interface, to inject arbitrary commands within the filename of a system upgrade upload...

CVE-2018-15529

Summary: CVE-2018-15529 affects Mutiny Monitoring Appliance (maintenance.cgi). An authenticated admin-user can inject arbitrary commands via the filename of a system upgrade upload. Vulnerable versions: before 6.1.0-5263. Impact: command execution with the privileges of the authenticated user (pa...