CVE-2017-11366 | BDVDB-2026-89417 Detail

Description#

components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Codiad/Codiad/pull/1013/commits/b3645b4c6718cef6de7003f41aafe7bfcc0395d1
http://www.jianshu.com/p/41ac7ac2a7af
https://github.com/Codiad/Codiad/issues/1011
https://github.com/Codiad/Codiad/pull/1013

Exploit#

No public exploit known

History#

Version 12017-08-21Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.