2 matches found
mrlg4php Code Injection Vulnerability
mrlg4php is a set of PHP programs for connecting to routers. A code injection vulnerability exists in the mrlg-lib.php file in versions of mrlg4php prior to 1.0.8. A remote attacker can exploit this vulnerability to execute arbitrary shell code...
CVE-2014-3927
CVE-2014-3927 affects mrlg4php: the mrlg-lib.php file in versions before 1.0.8 allows remote execution of arbitrary shell commands due to an input handling flaw. Impact per CVSS indicates high/critical severity (network access, no authentication, no user interaction required) with partial confide...