CVE-2020-19527

Publication date

2020-12-10 21:06:25

Family

mitre

State

PUBLISHED

Description

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.