Security Advisory

CVE-2024-5407

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-27 12:13:55
Last updated 2024-08-01 21:11:12
Assigner INCIBE
State PUBLISHED

Description

A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure.