op5 7.1.9 Configuration Command Execution
Posted by deepcore on June 17, 2016 – 10:56 pm
The configuration page in version 7.1.9 and below of op5 allows the ability to test a system command, which can be abused to run arbitrary code as an unprivileged user.
Post a reply
You must be logged in to post a comment.