Project

General

Profile

Actions

Bug #6474

closed

Command injection vulnerability in pkg_mgr_install.php, id parameter

Added by Jim Pingle over 5 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Urgent
Assignee:
Category:
Package System
Target version:
Start date:
06/09/2016
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.3.x
Affected Architecture:

Description

Command injection is possible using the id parameter on pkg_mgr_install.php

http://ip/pkg_mgr_install.php?id=firmware`/path/to/some/command`

Renato fixed it yesterday, adding this for tracking purposes.

Actions #1

Updated by Jim Pingle over 5 years ago

  • Description updated (diff)

To me for confirmation that it's fixed

Actions #2

Updated by Jim Pingle over 5 years ago

  • Status changed from Feedback to Resolved

It appears to be fixed. I could exploit it before, but not after.

Actions #3

Updated by Jim Pingle over 4 years ago

  • Private changed from Yes to No
Actions

Also available in: Atom PDF