CVE-2020-36642

CVE-2020-36642 affects trampgeek jobe up to version 1.6.x. The issue lies in the function run_in_sandbox of language file languageTask.php, enabling command injection when manipulated. Audit confirms upgrading to version 1.7.0 addresses the flaw (patch identifier: 8f43daf50c943b98eaf0c542da901a4a...

CVE-2020-36642 trampgeek jobe LanguageTask.php run_in_sandbox command injection

A vulnerability was found in trampgeek jobe up to 1.6.x and classified as critical. This issue affects the function runinsandbox of the file application/libraries/LanguageTask.php. The manipulation leads to command injection. Upgrading to version 1.7.0 is able to address this issue. The identifie...