Description

The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the antivirus command and parameters used to scan file uploads.

Remediation

References

CVE-2018-10092

Related Vulnerabilities

WordPress Plugin Peter's Math Anti-Spam Audio CAPTCHA Security Bypass (0.1.6)

PHP Other Vulnerability (CVE-2007-1522)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-37254)

Rukovoditel Improper Input Validation Vulnerability (CVE-2020-11819)

Microsoft SQL Server CVE-2023-32028 Vulnerability (CVE-2023-32028)

Severity

High

Classification

CVE-2018-10092 CWE-862 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities