Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter.
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/5305 |
Configurations
Information
Published : 2009-03-29 18:30
Updated : 2017-09-28 18:33
NVD link : CVE-2008-6539
Mitre link : CVE-2008-6539
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
holger_schurig
- destar