Security Advisory

CVE-2016-10751

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-05-24 17:40:09

Last updated 2024-08-06 03:30:20

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&action=ajax_upload.

← Browse all CVEs View on cve.org ↗