Unscored CVE-2018-12312 EUVD-2018-4286GHSA-mp6f-fc3x-9pwq

OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL …

Published Dec 4, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL parameter.