CVE-2016-9045 in ProcessMaker Enterprise Coreinformación

Resumen

por MITRE

A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Talos

Reservar

2016-10-26

Divulgación

2018-09-17

Moderación

aceptado

Artículo

VDB-124132

CPE

listo

EPSS

0.00579

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-9045
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-9045
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-9045/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to know what is going to be exploited?

We predict KEV entries!