CVE-2016-9045 A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being execut...
HighCVSS 8.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| processmaker | = 3.0.1.7 | No fix listed |
| ProcessMaker Enterprise | = ProcessMaker Enterprise Core 3.0.1.7-community | No fix listed |
References
- talosintelligence.com exploit third-party-advisory