CVE-2008-0148

Description

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.

CVSS Version 2.0

nvd
CVE ID: CVE-2008-0148
Base Score: 10.0
Base Severity: HIGH
Vector String:AV:N/AC:L/Au:N/C:C/I:C/A:C

Refrence: NVD

Description​

Description