CVE-2019-7300

Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldapadmin and ldappassword fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field...

CVE-2019-7300

CVE-2019-7300 affects Artica Proxy 3.06.200056. The root cause is reading the resources/settings.inc ldap_admin and ldap_password fields and then using those credentials at logon.php, allowing remote attackers to enter commands in admin.index.php’s command-line field to execute arbitrary commands...