cve/cves/2017/CVE-2017-7280.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-23 16:35:19 +00:00

Files

T

0xMarcio f0e5b09dfb Fix PoC discovery scope and source attribution

2026-10-21 18:34:06 +02:00

840 B

Raw Permalink Blame History

CVE-2017-7280

Description

An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable.

POC

Reference

https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/

Github

No PoCs found on GitHub currently.

Collections

https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2017-7280

840 B Raw Permalink Blame History