PT-2019-13357

Name of the Vulnerable Software and Affected Versions MobaXterm version 11.1 Description The issue allows remote attackers to execute arbitrary commands when a user visits a specially crafted URL, leveraging an argument injection vulnerability in the mobaxterm: URI handler. This can be achieved b...

CVE-2019-13475: Improper Neutralization of Argument Delimiters in a Command

In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on the available command-line arguments of the software, one can simply inject -exec to execute...