Security Advisory

CVE-2019-7692

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-02-10 16:00:00

Last updated 2024-09-16 17:32:36

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a crafted prefix value because of configuration file mishandling in the N=83 case, as demonstrated by a call to the PHP fputs function that creates a .php file in the public folder.

← Browse all CVEs View on cve.org ↗