Skip to content
OpenAdvisories

Vendor

EasyCorp

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2020-7361 Public exploit EPSS 17%

    ZenTao Pro Command Injection

    The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component. After authenticating to the ZenTao dashboard, attackers may construct and send arbitrary OS commands via the POST parameter 'path'…