CVE-2019-13597

s/sprm/s/dyn/PlayersetScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possible to execute commands on the server using the execute function...

CVE-2019-13597

s/sprm/s/dyn/PlayersetScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possible to execute commands on the server using the execute function...

CVE-2019-13597

CVE-2019-13597 affects Tyto Software Sahi Pro 8.0.0. The vulnerability is in s /sprm/s /dyn/Player_setScriptFile, which allows remote command execution via the _execute() function. An attacker could run ".sah" scripts through the Sahi Launcher or create new scripts with an editor, enabling server...