CVE-2020-13167

Published: 2020-05-19T20:15Z

Last Modified: 2024-11-21T05:00Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt