CVE-2020-7980

Published: 2020-01-25T19:15Z

Last Modified: 2024-11-21T05:38Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt