iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.

Published Dec 10, 2020 · Updated Aug 4, 2024 · Assigned by mitre