CVE-2018-5694

The callforward module in User Control Panel (UCP) in Nicolas Gudino (aka Asternic) Flash Operator Panel (FOP) 2.31.03 allows remote authenticated users to execute arbitrary commands via the command parameter.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

2.39% chance of exploitation in the next 30 days, 83th percentile

Published

2018-01-14

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://www.vulnerability-lab.com/get_content.php?id=1907

References

• CVE Record
• NVD entry

Related

• CVE-2018-5693
• CVE-2018-5695
• CVE-2018-5692
• CVE-2018-5696
• CVE-2018-5691
• CVE-2018-5697