CVE-2008-0148

Published: Jan 9, 2008
Updated: Apr 13, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2008-0148" target="_blank" rel="noopener"> CVE-2008-0148
Severity: High
Exploit:

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.