Critical
CVSS 10.0
Overview
board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter during a down_file action.
board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary comm...
board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter during a down_file action.
This vulnerability is rated 🔴 CRITICAL.
Recommended actions: