CVE-2020-7209

CVE-2020-7209 affects LinuxKI Toolset v6.0-1 and earlier. A remote command execution vulnerability exists in the kivis.php endpoint where the pid parameter is passed to shell_exec, allowing arbitrary commands on the target. The issue is fixed in release 6.0-2. The vulnerability is exploitable ove...

CVE-2020-7208

CVE-2020-7208 affects LinuxKI v6.0-1 and earlier, with an XSS vulnerability that is resolved in release 6.0-2. Multiple sources (NVD, Red Hat, OSV, CVE lists) corroborate the issue. Exploitation details are not provided in the connected documents. Remediation: upgrade to 6.0-2 or later (vendor pa...