Description

The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the antivirus command and parameters used to scan file uploads.

Remediation

References

CVE-2018-10092

Related Vulnerabilities

Apache Tomcat Insecure Default Initialization of Resource Vulnerability (CVE-2018-8014)

Liferay Portal CVE-2020-15840 Vulnerability (CVE-2020-15840)

Ruby Inadequate Encryption Strength Vulnerability (CVE-2011-4121)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5014)

MySQL CVE-2014-4233 Vulnerability (CVE-2014-4233)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-862 CVE-2018-10092