Description
meterN 1.2.3 contains an authenticated remote code execution vulnerability in admin_meter2.php and admin_indicator2.php scripts. Attackers can exploit the 'COMMANDx' and 'LIVECOMMANDx' POST parameters to execute arbitrary system commands with administrative privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Metern | meterN | 1.2.3 | — |
References
- ExploitDB-50596 exploit
- Archived Vendor Homepage product
- Zero Science Lab Disclosure (ZSL-2021-5690) third-party-advisory
- VulnCheck Advisory: meterN 1.2.3 Authenticated Remote Code Execution via Admin Scripts third-party-advisory