Invia #451515: www.horilla.com horilla 1.2.1 Remote Code Executioninformazioni

Titolowww.horilla.com horilla 1.2.1 Remote Code Execution
DescrizioneMultiple remote command execution vulnerabilities were found in horilla. Multiple handlers in horilla did not perform reasonable privilege checks, allowing request parameters from external sources to be passed into the eval() method, which ultimately led to the vulnerabilities.
Fonte⚠️ https://github.com/Sp1d3rL1/horilla-RCE
Utente
 sp1d3r (UID 77907)
Sottomissione24/11/2024 16:57 (2 anni fa)
Moderazione04/12/2024 09:48 (10 days later)
StatoAccettato
Voce VulDB286858 [horilla fino a 1.2.1 escalationi di privilegi]
Punti18

Do you want to use VulDB in your project?

Use the official API to access entries easily!