CVE-2020-14947

Publication date

2020-06-30 20:44:34

Family

mitre

State

PUBLISHED

Description

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plugins/main_sections/ms_config/ms_snmp_config.php is mishandled in get_mib_oid.