CVE-2018-1000619

Affected: Ovidentia 8.4.3 and earlier. Vulnerability: Unsanitized user input in utilit.php (bab_getAddonFilePathfromTg) can lead to Authenticated Remote Code Execution. Requires attacker to have permission to upload addons. CVSS metrics: v2 base 6.5 (MEDIUM); v3 base 8.8 (HIGH). No explicit remed...