[0day-rubbish] core-admin 1.0.... 노트

[0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8)

게시자: disclosure via Fulldisclosure on Sep 08 TO: fulldisclosure () seclists org SUBJECT: [0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8) FROM: disclosure () 0day-rubbish com ----BODY---- 0day Rubbish Research Team은 core-admin 1.0.164 (build 16468)의 취약점을 공개적으로 공개합니다.유형: 부적절한 따옴표 이스케이프를 통한 시스템 쉘 명령 삽입 (CWE-78) CVSS: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)...