CVE-2014-125118 eScan 5.5-2 Web Management Console Command Injection

A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to properly sanitize the 'pass' parameter when processing login requests to login.php, allowing an authenticated attacker with a valid username to inject arbitrary commands via a...

CVE-2014-125118

CVE-2014-125118 affects eScan Web Management Console 5.5-2. The flaw is a command-injection in login.php where the pass parameter isn’t properly sanitized, enabling an authenticated attacker with a valid username to inject commands and achieve remote code execution. Privilege escalation to root v...