Description
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system URI.
Unscored
CVE-2019-8954
EUVD-2019-18341GHSA-gwr8-226h-3g2x
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode…
Published Feb 20, 2019 · Updated Sep 17, 2024 · Assigned by mitre