CVE-2017-7280 An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code....
CriticalCVSS 9.8
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unitrends enterprise backup | <= 8.2.0-8 | No fix listed |
References
- rhinosecuritylabs.com exploit third-party-advisory