Security Advisory
CVE-2020-37186
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a crafted POST request.