Eaton Network Shutdown Module is prone to a remote PHP code-execution vulnerability. An attacker can exploit this issue to inject and execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system other attacks are also possible. Network Shutdown Module 3.21 build 01 is vulnerable other versions may also be affected.

• http://www.securityfocus.com/bid/54161

---

Updated on 2015-03-25