admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields.

Published Jun 1, 2020 · Updated Aug 6, 2024 · Assigned by mitre