Description
php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achieve code execution.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | locutus | <= 2.0.11 | — | GHSA-h86x-mv66-gr5q |
Critical · 9.8
CVE-2020-13619
EUVD-2021-1473GHSA-h86x-mv66-gr5q
OS Command Injection in Locutus
Published Jul 1, 2020 · Updated Aug 4, 2024 · Assigned by mitre