CVE-2022-39951

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specifically crafted HTTP...

The vulnerability of the batchimport.php script in the I-Librarian PDF file manager allows a hacker to execute arbitrary operating system commands.

The vulnerability of the batchimport.php script in the I-Librarian PDF file manager exists because measures to neutralize the special elements used in operating system commands are not taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands via...