WS-2019-0240

wxchangba all versions are vulnerable to command injection when not validating user input on the reqPostMaterial function, passing contents of the file parameter to an exec call...

PT-2020-21361

Name of the Vulnerable Software and Affected Versions wxchangba versions affected versions not specified Description The issue concerns a Command Injection problem. It arises because the package fails to validate user input on the reqPostMaterial function. Specifically, the contents of the file...

Command Injection

Overview All versions of wxchangba are vulnerable to Command Injection. The package does not validate user input on the reqPostMaterial function, passing contents of the file parameter to an exec call. This may allow attackers to run arbitrary commands in the system. Recommendation No fix is...