Description
A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be changed to a PHP interpreter, allowing an attacker to upload PHP data that will then be executed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xerte | Xerte Online Tools | < v3.15.5, < 3.14.6 | v3.15.5 |