kodbox 操作系统命令注入漏洞

kodbox is a web file manager. An operating system command injection vulnerability exists in kodbox version 1.26, which stems from the file webconsole.php that can lead to operating system command injection...

CVE-2020-24572

CVE-2020-24572 affects RaspAP 2.5 and stems from an issue in includes/webconsole.php. With authenticated access, a misconfigured (and virtually unrestricted) web console can be used to attack the underlying OS (Raspberry Pi) running RaspAP, allowing execution of system commands, including uploadi...