CVE-2019-10863

A command injection vulnerability exists in TeemIp versions before 2.4.0

published April 4, 2019

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows one to create a new PHP file with the exception of config information. The malicious PHP code sent is executed instantaneously and is not saved on the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13418 · 96.4th percentile
Published
2019-04-04T17:07Z
EPSS history
Timeline
  • 04 APR 17:07Z
    A command injection vulnerability exists in TeemIp versions before 2.4.0
    cvelistv5