Security Advisory

CVE-2018-7271

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-02-21 00:00:00
Last updated 2024-08-05 06:24:11
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php configuration file filtering is not rigorous: one can insert malicious code in the installation process to execute arbitrary commands or obtain a web shell.