Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Easycorp Subscribe
Filtered by product Zentao Pro
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7361 1 Easycorp 1 Zentao Pro 2020-08-10 9.0 HIGH 8.8 HIGH
The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component. After authenticating to the ZenTao dashboard, attackers may construct and send arbitrary OS commands via the POST parameter 'path', and those commands will run in an elevated SYSTEM context on the underlying Windows operating system.