CVE-2018-5694

The callforward module in User Control Panel (UCP) in Nicolas Gudino (aka Asternic) Flash Operator Panel (FOP) 2.31.03 allows remote authenticated users to execute arbitrary commands via the command parameter.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-01-14

Last modified

2024-08-05

Affected products

• Flash Operator Panel (Fop2)

References

• https://www.vulnerability-lab.com/get_content.php?id=1907