Description
costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request.
Unscored
CVE-2014-2935
EUVD-2014-2957GHSA-g26c-r36p-w7g4
costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacte…
Published May 8, 2014 · Updated Aug 6, 2024 · Assigned by certcc