Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-58286

dizqueTV 1.5.3 Remote Code Execution via FFMPEG Executable Path

Description

dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings. Attackers can modify the executable path with shell commands to read system files like /etc/passwd by exploiting improper input validation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

vexorian dizqueTV

Default version status: unaffected

  • 1.5.3affected

References