CVE-2014-2936: Improper Control of Generation of Code

The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via 1 the maindirhotfolder parameter to dirmng/index.php, or an unspecified parameter to 2 PPD/index.php, 3 dirmng/docmd.php, or 4 dirmng/param.php...

PT-2014-4966

Name of the Vulnerable Software and Affected Versions Caldera version 9.20 Description The issue allows remote attackers to conduct variable-injection attacks in the global scope. This can be achieved via the maindir hotfolder parameter to "dirmng/index.php", or an unspecified parameter to...