CVE-2020-13694

In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user can execute sudo mysql without a password, which means that…

published June 1, 2020

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user can execute sudo mysql without a password, which means that the www-data user can execute arbitrary OS commands via the mysql -e option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02017 · 80.8th percentile
Published
2020-06-01T15:19Z
EPSS history
Timeline
  • 01 JUN 15:19Z
    In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user can execute sudo mysql without a password, which means that…
    cvelistv5