Skip to content
OpenAdvisories

Product · Eppler Software

WebTester

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2013-10037 Public exploit EPSS 14%

    WebTester 5.x install2.php Unauthenticated Command Execution

    An OS command injection vulnerability exists in WebTester version 5.x via the install2.php installation script. The parameters cpusername, cppassword, and cpdomain are passed directly to shell commands without sanitization. A remote unauthenticated attacker c…