Description
A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown functionality of the file /api/database/testConnect of the component Maintenance Management Module. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| elunez | eladmin | 2.7 | — |
References
- VDB-303320 | elunez eladmin Maintenance Management Module testConnect deserialization vdb-entry
- VDB-303320 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #546132 | eladmin v2.7 Mysql_JDBC arbitrary file reading vulnerability third-party-advisory
- https://www.yuque.com/u520611/giuhru/vfvchim8sphv2y1g?singleDoc exploit