Project

General

Profile

Bug #6474

Command injection vulnerability in pkg_mgr_install.php, id parameter

Added by Jim Pingle about 3 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Urgent
Assignee:
Category:
Package System
Target version:
Start date:
06/09/2016
Due date:
% Done:

0%

Estimated time:
Affected Version:
2.3.x
Affected Architecture:

Description

Command injection is possible using the id parameter on pkg_mgr_install.php

http://ip/pkg_mgr_install.php?id=firmware`/path/to/some/command`

Renato fixed it yesterday, adding this for tracking purposes.

History

#1 Updated by Jim Pingle about 3 years ago

  • Description updated (diff)

To me for confirmation that it's fixed

#2 Updated by Jim Pingle about 3 years ago

  • Status changed from Feedback to Resolved

It appears to be fixed. I could exploit it before, but not after.

#3 Updated by Jim Pingle over 2 years ago

  • Private changed from Yes to No

Also available in: Atom PDF