CVE-2018-5694 The callforward module in User Control Panel (UCP) in Nicolas Gudino (aka Asternic) Flash Operator Panel (FOP) 2.31.03 allows remote authenticated users to execute arbitrary commands via the command p...
HighCVSS 8.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The callforward module in User Control Panel (UCP) in Nicolas Gudino (aka Asternic) Flash Operator Panel (FOP) 2.31.03 allows remote authenticated users to execute arbitrary commands via the command parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fop2 flash operator panel | = 2.31.03 | No fix listed |
References
- www.vulnerability-lab.com exploit third-party-advisory