CVE-2008-0148

  • Last update: Apr 13, 2023

Description

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.

Software From Fixed in
tutos / tutos 1.3 1.3.x

Details

    • Severity: High
  • CVE: CVE-2008-0148
  • Published: Jan 9, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs