Lucene search

EZ SQL Reports <= 4.11.33 - Authenticated Arbitrary Code Execution

🗓️ 14 Sep 2015 00:00:00Reported by Felipe MolineType

EZ SQL Reports <= 4.11.33 - Authenticated Arbitrary Code Execution. "passthru" calls in the code allow injection through POST parameters, enabling execution of arbitrary commands to "/usr/bin/mysql

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Vulners

Node

-elisqlreportsRange<4.11.37

Source	Link
vulners	www.vulners.com/exploitdb/EDB-ID:38176

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Sep 2015 00:00Current

1.2Low risk

Vulners AI Score1.2