critical10.0Public exploit code
CVE-2008-0148
TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TUTOS 1.3 - 'cmd.php' Remote Command Execution2008-01-07 · webapps · php · Verified
Impact
TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tutos | Tutos | Version 1.3 |