In InoERP 0.7.2, an unauthorized... CVE-2020-28870

7.5 AV AC AU C I A
发布: 2021-02-10
修订: 2024-11-21

In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_personalization/json_fp.php.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息