cve/2020/CVE-2020-13404.md

### [CVE-2020-13404](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13404)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

The ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento allows command injection.

### POC

#### Reference
- https://github.com/quadra-informatique/Atos-Magento/releases
- https://sysdream.com/news/lab/
- https://sysdream.com/news/lab/2020-06-09-cve-2020-13404-remote-system-command-injection-in-atos-magento-module/

#### Github
No PoCs found on GitHub currently.