logo
DATABASE RESOURCES PRICING ABOUT US

PDF Light Viewer < 1.4.12 - Authenticated Command Injection

Description

The plugin allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript.


Related