Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-11062

SUNNET WMPro v5.0 and v5.1 has OS Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUNNET WMPro

  • 5.0affected
  • 5.1affected

References