2 matches found
CVE-2020-7752
This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands...
8.8CVSS5.9AI score0.06749EPSS
SaveExploits1
PT-2020-19768
Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 4.27.11 Description This issue affects the systeminformation package, allowing an attacker to perform Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then...
8.8CVSS0.06749EPSS
SaveExploits1References12
20