CVE-2018-18603 | BDVDB-2026-108741 Detail

Description#

360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement, followed by os.system("CMD") or os.system("PowerShell"), within a .py file. NOTE: the vendor's position is that this cannot be categorized as a vulnerability, although it is a security-related issue

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-10-23Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.