CVE-2018-7046

CVE-2018-7046

** DISPUTED ** Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .NET code evaluation context via C# code in a "Pages -> Edit -> Template -> Edit template properties -> Layout" box. NOTE: the vendor has responded that there is intended functionality for authorized users to edit and update ascx code layout.

Source: CVE-2018-7046

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다