vendor:
VigileCMS
by:
The:Paradox
7.5
CVSS
HIGH
Remote Command Execution
CWE
Product Name: VigileCMS
Affected Version From: <= 1.8
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2007
§ 0day VigileCMS <= 1.8 Stealth - Remote Command Execution §
This exploit allows remote command execution in VigileCMS version 1.8 and below. The vulnerability is demonstrated through a code snippet in the index.php file and func.inc.php file. It allows unauthorized users to execute commands on the server.
Mitigation:
To mitigate this vulnerability, it is recommended to update VigileCMS to a version higher than 1.8 or apply a patch if available.